Malicious website discovery using legitimate third party identifiers
AssigneePalo Alto Networks, Inc.
InventorsOleksii Starov, Yuchen Zhou, Xiao Zhang, Fang Liu
Life of this patent
Estimating the term…
Loading patent…
AssigneePalo Alto Networks, Inc.
InventorsOleksii Starov, Yuchen Zhou, Xiao Zhang, Fang Liu
Estimating the term…
An author of a malicious websites campaign (scam or phishing) likely uses a legitimate third-party service to facilitate the malicious campaign. An example includes legitimate CAPTCHA (Completely Automated Public Turing Test to Tell Computers and Humans Apart) services to conceal the malicious campaign from automated security scanners. A security service/platform can employ a detection pipeline that leverages use of CAPTCHA keys across websites of a malicious websites campaign. Websites that use CAPTCHA keys found in known malicious websites can at least be identified as suspect and communicated to firewalls.
A method comprising:
One or more non-transitory machine-readable media comprising program code for identifying malicious websites, wherein the program code comprises program code to:
An apparatus comprising:
Dependencies are inferred from the claim text.