Patent ID: 9306973
Filing Date: 2016-04-05
CPC Classification: H04L

Claim Text:
1. A non-transitory computer-readable medium storing one or more computer-executable instructions that, when executed, cause one or more processors to: detect that a primary browser has opened to a URL, the primary browser being executed on a client device; activate, by the client device, a reference browser to the same URL as the primary browser, the reference browser being executed but not viewable on the client device, the reference browser configured to mimic the primary browser that has opened to the URL by at least duplicating data fields displayed on the primary browser; copy data input to respective data fields displayed on the primary browser to the corresponding data fields on the reference browser; detect a transmission of data from the client device to a domain corresponding to the URL, the detected data transmission being a result of the data input on the primary browser; indicate an occurrence of an unauthorized activity on the client device based on, at least, a determination that the detected data transmission from the client device to the domain corresponding to the URL does not match the data input copied to the reference browser; detect an incoming confirmation transmission from the domain corresponding to the URL, the confirmation transmission corresponding to the transmission of the data from the client device to the domain corresponding to the URL; and indicate an occurrence of an unauthorized activity on the client device based on, at least, a determination that the detected incoming confirmation transmission does not match the data input copied to the reference browser.