Patent ID: 11895132
Assignee: BANK OF AMERICA CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 8:
9. A non-transitory memory storing instructions that, when executed by a processor, causes a computing device to:
identify, based on a knowledge base comprising patterns identified via a simulated command and control server, a pattern of file transfers between a computing device on a secure network and a common group of image hosting websites, wherein the pattern comprises one or more of pulling, pushing, and retrieving of a same file multiple times;
quarantine, based on an identified pattern of file transfers, the computing device from the secure network;
analyze at least one file transferred between the computing device and the common group of image hosting websites for an indication of steganography; and
cause display, based on the indication of steganography, an indication that the computing device had been compromised by command and control malware.