Systems and methods for utilizing user profile data to protect against phishing attacks

A system for utilizing user profile data to protect against phishing attacks, the system comprising:

• at least one physical processor;
• physical memory comprising computer-executable instructions and one or more modules that, when executed by the physical processor, cause the physical processor to:
• detect, by a detection module, a profile of a target user associated with one or more services accessed by a network-based application;
• determine, by a determining module, at least one of a plurality of identifiers associated with each of the services;
• extract, by an extraction module and for each of the identifiers, feature vectors describing exploitable screen elements in the network-based application associated with phishing attacks;
• update, by an update module and based on the feature vectors, a group of previously extracted feature vectors in a data repository storing additional profiles for other users associated with the services accessed by the network-based application;
• predict, by a prediction module and utilizing a machine-learning model, phishing attack threats for the profile of the target user based on a similarity with the additional profiles;
• and
• perform, by a security module, a security action that protects against the phishing attack threats.

A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

• detect a profile of a target user associated with one or more services accessed by a network-based application;
• determine at least one of a plurality of identifiers associated with each of the services;
• extract feature vectors describing exploitable screen elements in the network-based application associated with phishing attacks;
• update, based on the feature vectors, a group of previously extracted feature vectors in a data repository storing additional profiles for other users associated with the services accessed by the network-based application;
• predict, utilizing a machine-learning model, phishing attack threats for the profile of the target user based on a similarity with the additional profiles;
• and
• perform a security action that protects against the phishing attack threats.