Advanced data collection using browser extension application for internet security
A browser extension application is configured to collect data relating to the user's browsing activity and display notifications on a user interface. A user can instruct a web browsing application to navigate to a website. The browser extension application can detect a type of the webpage, and based on the type of the webpage, collect certain information relating to what the webpage is asking the user to provide and what the user is providing to the webpage. The browser extension application can transmit this information to a browser extension server. The browser extension server can determine a likelihood that the website is associated with instances of hacking online accounts. The browser extension server can transmit a signal to the browser extension application of the user's computing device. The browser extension application can take an action, e.g., direct the user to another website or log out of the user's account.
1. A method comprising:
receiving, at a first server, first browser extension data from a plurality of provider client devices, wherein the first browser extension data from each provider client device includes a first website address, a first time of visit and a piece of information shared by the provider client device on the first website address;
receiving, at the first server, fraud transaction data from a third-party server, wherein:
the fraud transaction data is associated with an account, and
the fraud transaction data includes an account number, a transaction amount, a transaction date and an identification code;
associating, by the first server, the fraud transaction data with the first browser extension data by matching first website address, the first time of visit or the piece of information shared by the provider client device on the first website address with the account number, the transaction amount, the transaction date or the identification code;
generating, by the first server, a list of websites associated with fraudulent activity based on the association;
receiving, at the first server, second browser extension data from a requesting client device, wherein the second browser extension data includes a second website address;
determining, by the first server, whether the second website address is included on the list of websites, and in response to a determination that the second website address is included on the list of websites, transmitting a warning signal to the requesting client device, wherein the warning signal is configured to disable a field on a webpage to be displayed on the requesting client device; and
retrieving, by the first server, from a third-party database of the third-party server, third-party information relating to the identification code;
retrieving by the first server, from the first database of the first server first information relating to the first website address; and
determining, by the first server, a degree of similarity between the third-party information relating to the identification code and the first information relating to the first website address,
wherein the determining is performed using a natural language processing technique.
2. The method of claim 1 , wherein the piece of information includes a username and a password.
3. The method of claim 2 , wherein associating the fraud transaction data with the first browser extension data includes associating the account number and the transaction amount with the piece of information.
4. The method of claim 3 , further comprising associating the transaction date with the first time of visit, wherein the transaction date is associated with the first time of visit when the transaction date is within a threshold number of days of the first time of visit.
5. The method of claim 3 , wherein associating the account number with the piece of information is executed using a database including all names and account numbers of account holders.
6. The method of claim 3 , wherein generating the list of websites associated with the fraudulent activity includes, for each instance of the fraud transaction data being associated with the first browser extension data, adding the first website address to the list of websites associated with the fraudulent activity.
7. The method of claim 6 , wherein the first website address is added to the list of websites associated with the fraudulent activity when there are at least a threshold number of fraud transaction data points indicating the identification code is associated with the first website address.
8. The method of claim 6 , wherein the first website address is added to the list of websites associated with the fraudulent activity when there are at least a threshold number of fraud transaction data points indicating the identification code is associated with the first website address within a predetermined period of time of the transaction date and the first time of visit.
9. The method of claim 1 , wherein the warning signal is configured to cause the requesting client device display a message indicating that the second website address is fraudulent.
10. The method of claim 1 , wherein the warning signal includes statistics about a rate of fraud occurrence related to the second website address.