Cloud ai engine for malware analysis and attack prediction

A cloud-based system for detecting malicious software executing on a plurality of computing devices, wherein the system comprises:

• a database for storing information associated with previously-known malware;
• and
• a hardware processor configured to:
• collect, from a plurality of agents executing on a respective computing device, analysis data corresponding to executables on the respective computing device;
• determine a suspicious activity pattern based on the received analysis data;
• determine that at least one executable on a computing device is malware based on the determined suspicious activity pattern;
• generate a plurality of remedial actions for protecting respective computing devices of the plurality of agents based on the suspicious activity pattern, and
• distribute, to the plurality of agents, one or more commands to protect the respective computing device from the malware.

A non-transitory computer readable medium comprising computer executable instructions for detecting malicious software executing on a plurality of computing devices, the instructions comprising:

• collecting, from a plurality of agents executing on a respective computing device, analysis data corresponding to executables on the respective computing device;
• determining a suspicious activity pattern based on the received analysis data;
• determining that at least one executable on a computing device is malware based on the determined suspicious activity pattern;
• generating a plurality of remedial actions for protecting respective computing devices of the plurality of agents based on the suspicious activity pattern, and
• distributing, to the plurality of agents, one or more commands to protect the respective computing device from the malware.