FIELD: information protection.
SUBSTANCE: present invention relates to means for detecting cases of online fraud, including those occurring in the field of provision of online financial services. A method and a system are proposed for detecting activity indicating remote control on the user’s computer by means of remote administration tool (hereinafter – RAT tools), based on the analysis of keyboard input events, and detecting unique sequences of input events characteristic for RAT tools.
EFFECT: increase in the efficiency of detecting online fraud by detecting remote administration tools using signatures.
11 cl, 6 dwg
