Method and system for detecting finance-related phishing attacks

A non-transitory computer-readable medium storing a set of instructions for defending against finance-related phishing attacks, the set of instructions comprising:

• one or more instructions that, when executed by one or more processing circuitry of a device, cause the device to:
• detect when a message is a finance-related message based on contents of the message, wherein a finance-related message is a message that references at least identifiable financial elements;
• for each finance-related message, identify a type of finance-related malicious activity, wherein a type of finance-related malicious activity is based on characteristics of the finance-related message;
• perform, using at least one AI agent from a network of AI agents, in-depth analysis of the contents of the message, wherein the at least one AI agent is specialized to detect the finance-related malicious activity of the identified type, and wherein performing further includes:
• assign a finance-related attack detection task to each AI agent of the at least one AI agent, wherein each assigned specialized task relates to detecting a type of finance-related malicious activity;
• configure each AI agent with tools to achieve the assigned finance-related attack detection task, wherein tools are external services that the AI agent can invoke to accomplish the assigned specialized task;
• and
• provision a finance-related attack detection reasoning logic in each AI agent, wherein the finance-related attack detection reasoning logic relates to each assigned finance-related attack detection task and invocation of the tools to accomplish the finance-related attack detection task;
• and
• when a finance-related malicious activity is detected in the message as a result of perform the in-depth analysis, causing execution of a mitigation action.

A system for defending against finance-related phishing attacks comprising:

• a processing circuitry;
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• detect when a message is a finance-related message based on contents of the message, wherein a finance-related message is a message that references at least identifiable financial elements;
• for each finance-related message, identify a type of finance-related malicious activity, wherein a type of finance-related malicious activity is based on characteristics of the finance-related message;
• perform, using at least one AI agent from a network of AI agents, in-depth analysis of the contents of the message, wherein the at least one AI agent is specialized to detect the finance-related malicious activity of the identified type, and wherein performing further includes:
• assign a finance-related attack detection task to each AI agent of the at least one AI agent, wherein each assigned specialized task relates to detecting a type of finance-related malicious activity;
• configure each AI agent with tools to achieve the assigned finance-related attack detection task, wherein tools are external services that the AI agent can invoke to accomplish the assigned specialized task;
• and
• provision a finance-related attack detection reasoning logic in each AI agent, wherein the finance-related attack detection reasoning logic relates to each assigned finance-related attack detection task and invocation of the tools to accomplish the finance-related attack detection task;
• and
• when a finance-related malicious activity is detected in the message as a result of perform the in-depth analysis, causing execution of a mitigation action.