Method and system for identifying malicious activity of pre-determined type

A computer implemented method for identifying malicious activity of a pre-determined type, the pre-determined type being cookie-stuffing of a cookie, the method being executable by a server, the server being couplable to a web service and an electronic device, the cookie being associated with the web service, the method comprising:

• acquiring, by the server, a navigational history from the electronic device, the navigational history comprising an indication of a plurality of web resources, each of the web resources in the plurality of web resources having been previously accessed by the electronic device;
• in response to determining a presence of the cookie within a memory associated with the electronic device, the cookie having been acquired prior to accessing the web service, analyzing, by the server, the plurality of web resources to identify a subset of web resources being candidates for being associated with the malicious activity;
• executing, by the server, an automated browser application, the automated browser application being configured to:
• access each of the web resources within the subset of web resources;
• and
• analyze, by the server, a log associated with the automated browser application accessing each of the web resources, the log comprising an indication of a presence of a cookie unrelated to each of the web resources;
• and
• determine, for a given web resource included within the subset of web resources, a presence of malicious activity based on the log.