System and method for detection of malicious interactions in a computer network

A system for detection of malicious interactions in a computer network with at least one blocking service, the system comprising:

• a processor, in communication with the computer network;
• and
• a first database, coupled to the processor and comprising indicator of compromise (IOC) registers,
• wherein the processor is configured to:
• generate at least one decoy segment;
• broadcast the generated at least one decoy segment in a public database;
• monitor the computer network to identify interactions associated with the generated at least one decoy segment;
• determine at least one IOC for the identified interactions;
• store the determined IOC in the first database;
• and
• share the first database with the at least one blocking service in order to block communication between the computer network and any computer associated with the determined at least one IOC.

A method of detecting attacks on a target computer, the method comprising:

• publishing, by a processor, at least one decoy data item in at least one publicly accessible database;
• monitoring, by the processor, communication to the target computer to identify interactions associated with the at least one decoy data item;
• determining, by the processor, at least one attribute for the identified interactions;
• and
• blocking communication between the target computer and any external computer, the communication associated with the determined at least one attribute.