Generating a scaled impersonation attack prediction

A method for generating a scaled attack prediction, comprising:

• receiving, by a system, interaction information associated with a plurality of interactions,
• wherein each interaction in the plurality of interactions is associated with a respective user from a plurality of users;
• retrieving, by the system, passive user authentication information associated with the plurality of users;
• computing, by the system, a plurality of risk metrics based on the interaction information and the passive user authentication information, each risk metric in the plurality of risk metrics being associated with a respective interaction from the plurality of interactions;
• generating, by the system, a scaled attack prediction based on the plurality of risk metrics, the scaled attack prediction indicating an occurrence of a scaled attack;
• and
• performing, by the system, a security action based on the scaled attack prediction indicating the occurrence of the scaled attack.

A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:

• one or more instructions that, when executed by one or more processors of a system, cause the system to:
• compute a plurality of risk metrics based on a plurality of sets of interaction information and a plurality of sets of passive user authentication information,
• wherein each set of interaction information in the plurality of sets of interaction information is associated with a respective interaction from a plurality of interactions,
• wherein each set of passive user authentication information in the plurality of sets of passive user authentication information is associated with a respective user from a plurality of users,
• wherein each interaction in the plurality of interactions is associated with a respective user from the plurality of users, and
• wherein each risk metric in the plurality of risk metrics is associated with a respective interaction from the plurality of interactions;
• generate a scaled attack prediction based on the plurality of risk metrics, the scaled attack prediction indicating a likelihood of an ongoing scaled attack;
• and
• perform an action based on the scaled attack prediction.