Systems and methods for detecting malicious in application transactions
AssigneeNortonLifeLock Inc.
InventorJosh Opos
Life of this patent
Estimating the term…
Abstract
The disclosed computer-implemented method for detecting malicious in-application transactions may include identifying an application running on a computing device, wherein the application is granted access to a payment system, monitoring data between the application and the payment system, determining at least one characteristic associated with the application, determining the at least one characteristic is associated with a malicious transaction on the payment system, and performing at least one action to prevent the malicious transaction. Various other methods, systems, and computer-readable media are also disclosed.
Claims20
A computer-implemented method for detecting malicious in-application transactions, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
- identifying an application running on the computing device, wherein the application is granted access to a payment system for performing in-application transactions;
- monitoring data between the application and the payment system;
- identifying at least one characteristic of the application that is associated with confirming an in-application transaction;
- determining, based on the at least one characteristic, that the application is attempting to trick a user of the computing device into confirming a malicious in-application transaction on the payment system by dimming a screen of the computer device;
- and
- performing at least one action to prevent the malicious in-application transaction.
A system for detecting malicious in-application transactions, the system comprising:
- at least one physical processor;
- and
- physical memory comprising computer-executable instructions that, when executed by the physical processor, cause the physical processor to:
- identify an application running on a computing device, wherein the application is granted access to a payment system for performing in-application transactions;
- monitor data between the application and the payment system;
- identify at least one characteristic of the application that is associated with confirming an in-application transaction;
- determine, based on the at least one characteristic, that the application is attempting to trick a user of the computing device into confirming a malicious in-application transaction on the payment system by dimming a screen of the computing device;
- and
- performing at least one action to prevent the malicious in-application transaction.
A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:
- identify an application running on the computing device, wherein the application is granted access to a payment system for performing in-application transactions;
- monitor data between the application and the payment system;
- identify at least one characteristic of the application that is associated with confirming an in-application transaction;
- determine, based on the at least one characteristic that the application is attempting to trick a user of the computing device into confirming with a malicious in-application transaction on the payment system by dimming a screen of the computing device;
- and
- performing at least one action to prevent the malicious in-application transaction.
Dependencies are inferred from the claim text.