Patent ID: 8683595

Claim:
A computer-implemented method for detecting potentially malicious content within Near Field Communication messages, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying an NFC message received by a mobile device via NFC transmission from an NFC device located in proximity of the mobile device; determining that the NFC message is formatted in a suspicious format type capable of importing potentially malicious content into the mobile device by: identifying a format-type identifier that specifies a format type of the NFC message; comparing the format-type identifier with a list of suspicious format types capable of importing potentially malicious content into the mobile device; determining, based at least in part on the comparison, that the format-type identifier matches at least one suspicious format type identified in the list; in response to determining that the NFC message is formatted in the suspicious format type, scanning the NFC message for potentially malicious content; while scanning the NFC message, detecting at least one instance of potentially malicious content within the NFC message; in response to detecting the instance of potentially malicious content within the NFC message, performing at least one security action on the mobile device.