Abstract: A system and method for identifying and preventing theft or unauthorized use of multi-factor authentication (MFA) credentials by correlating MFA messages with real-time user activity. The system includes a processor, memory, and storage configured to receive MFA messages via SMS, email, or app notifications, and to monitor applications or browser tabs currently active on a user device. A multi-factor authentication module includes a notification detection module, a user activity monitoring module, a contextual matching module, and a response and alerting module. The contextual matching module generates a confidence score based on a comparison between the MFA message origin and the user's concurrent activity. Based on this score, the system suppresses, alerts, or blocks suspicious MFA messages.

Abstract: A system for performing a computer-implemented method for preventing malicious network activity is provided. The method includes detecting a first click operation on a first window corresponding to a first uniform resource locator (“URL”), the first window displayed on a graphical user interface (“GUI”) of a computing system. A time of the first click operation is determined. A second click operation is detected on a second window corresponding to a second URL, the second window displayed on the GUI. A time of the second click operation on the second window is detected. The second click operation on the second window is blocked based on the time of the first click operation and the time of the second click operation.