US 12,229,774 B2
Detecting malware by monitoring client-side memory stacks
Shlomi Boutnaru, Modiin (IL)
Assigned to PAYPAL, INC., San Jose, CA (US)
Filed by PAYPAL, INC., San Jose, CA (US)
Filed on Apr. 26, 2021, as Appl. No. 17/240,169.
Application 17/240,169 is a continuation of application No. 15/806,965, filed on Nov. 8, 2017, granted, now 10,990,975.
Prior Publication US 2021/0312446 A1, Oct. 7, 2021
Int. Cl. G06Q 20/40 (2012.01); G06F 21/56 (2013.01); H04L 9/40 (2022.01)
CPC G06Q 20/4014 (2013.01) [G06F 21/566 (2013.01); G06Q 20/4016 (2013.01); H04L 63/1425 (2013.01); H04L 63/145 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system comprising:
one or more hardware processors; and
a non-transitory memory storing instructions that, when executed by the one or more hardware processors, causes the one or more hardware processors to perform operations comprising:
receiving, from a first application of a computing device that is not part of the system, a request for performing a payment process associated with an account;
monitoring, via a second application of the computing device, an execution of a set of functions from a client-side memory stack of the computing device, the client-side memory stack being populated with the set of functions corresponding to the payment process;
determining a malicious operating condition of the computing device based on the monitoring, wherein the determining the malicious operating condition of the computing device comprises determining that the set of functions being executed by the computing device from the client-side memory stack is different from an expected set of functions or that an order in which the set of functions is being executed by the computing device from the client-side memory stack is different from an expected order of execution of the set of functions corresponding to the payment process; and
in response to determining the malicious operating condition of the computing device, executing, via the second application, a remedial action on the computing device.