Patent ID: 8763126

Claim:
A mobile communication device comprising: a processor; a transceiver in communication with the processor; and a memory that stores a malware and an agent logic that, when executed by the processor, causes the processor to perform operations comprising discovering a plurality of devices in a proximity, compiling a list of discovered devices in the proximity, creating a trigger by the agent logic, the trigger comprising a fake connection that, when selected, causes the agent logic to connect to an agent server on a network, inserting a trigger into the list of discovered devices, wherein the trigger, when selected, causes the agent logic to connect to the agent server, wherein the agent server collects malware signatures, and wherein the trigger appears to the malware to be one of the list of discovered devices, receiving, from the malware, a request to connect to the trigger, and in response to receiving the request to connect to the trigger, connecting to the agent server and reporting malware activity to the agent server.