Executing Real-Time Message Monitoring to Identify Potentially Malicious Messages and Generate Instream Alerts

A method, comprising:

• at a computing platform comprising at least one processor, a communication interface, and memory:
• monitoring, by the at least one processor, a plurality of messages received by a messaging server associated with an operator;
• detecting, by the at least one processor, that a first message of the plurality of messages is potentially malicious;
• and
• in response to detecting that the first message of the plurality of messages is potentially malicious, executing, by the at least one processor, one or more protection actions, wherein executing the one or more protection actions comprises:
• generating a first alert message comprising information indicating that the first message of the plurality of messages is potentially malicious;
• and
• sending, via the communication interface, to the messaging server associated with the operator, the first alert message comprising the information indicating that the first message of the plurality of messages is potentially malicious,
• wherein sending the first alert message to the messaging server associated with the operator causes the messaging server associated with the operator to deliver the first alert message comprising the information indicating that the first message of the plurality of messages is potentially malicious to at least one computing device associated with an intended recipient of the first message of the plurality of messages.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

• monitor a plurality of messages received by a messaging server associated with an operator;
• detect that a first message of the plurality of messages is potentially malicious;
• and
• in response to detecting that the first message of the plurality of messages is potentially malicious, execute one or more protection actions, wherein executing the one or more protection actions comprises:
• generating a first alert message comprising information indicating that the first message of the plurality of messages is potentially malicious;
• and
• sending, via the communication interface, to the messaging server associated with the operator, the first alert message comprising the information indicating that the first message of the plurality of messages is potentially malicious,
• wherein sending the first alert message to the messaging server associated with the operator causes the messaging server associated with the operator to deliver the first alert message comprising the information indicating that the first message of the plurality of messages is potentially malicious to at least one computing device associated with an intended recipient of the first message of the plurality of messages.