Introducing Microsoft Edge’s New Scareware Sensor

Microsoft has unveiled a new scareware sensor for its Edge web browser, designed to enhance security measures against tech support scams. This sensor aims to detect scam pages more efficiently, ensuring that Defender SmartScreen can swiftly block them.

Tech support scams, also known as scareware scams, involve fraudsters using aggressive landing pages to deceive victims into believing their devices are infected with malware. They then attempt to gain remote access to the victims’ systems by pressuring them to call a fake tech support number.

Defender SmartScreen, a security feature in Microsoft Edge, springs into action when an abusive site is identified as malicious. Additionally, the built-in Edge scareware blocker, introduced at the November 2024 Ignite conference and now enabled by default on most PCs since February, provides real-time protection by detecting signs of scams using a local machine learning model.

Upon detecting a tech support scam page in real-time, the AI/ML-based scareware blocker alerts users and provides them with the option to proceed if they trust the website’s safety. The blocker exits full-screen mode, issues a warning, stops loud audio, and displays a page thumbnail.

Users can also contribute to safeguarding others by reporting scam sites to Microsoft, enabling the SmartScreen service to identify scareware outbreaks more effectively.

With the new sensor in action, SmartScreen will receive prompt notifications to index scam pages faster, ensuring that Edge users worldwide are promptly informed about potential scams.

Rob Franco, Principal PM Manager of the Microsoft Edge Enterprise and Security team, shared insights on the new scareware sensor’s functionality. According to Franco, the sensor in Edge 142 can now promptly notify SmartScreen about potential scams, facilitating faster confirmation and global blocking of such threats. Future enhancements will include additional anonymous detection signals to help Edge recognize recurring scam patterns.

While the new scareware sensor is currently disabled by default in Microsoft Edge 142, the company plans to enable it for all users who have activated SmartScreen to bolster scam detection capabilities.

Reports from Edge users have highlighted various scareware scenarios, including scams masquerading as law enforcement agencies demanding payment to unlock PCs. The scareware blocker has successfully intercepted such scams, even before being flagged by Defender SmartScreen or other services like Google Safe Browsing.

Microsoft’s continuous efforts to combat scareware and enhance user security demonstrate a proactive approach to safeguarding online experiences for Edge users.