Abstract: A scam detection system includes a user computer that runs a security application and a backend system that runs a scam detector. An email is received at the user computer. The security application extracts and forwards a content of the email, which includes a body of the email, to the backend system. The email body of the email is anonymized by removing personally identifiable information from the email body. A hash of the anonymized email body is generated and compared against hashes of a whitelist and a blacklist. The anonymized email body is classified. A segment of text of the anonymized email body is identified and provided to the user computer when the anonymized email body is classified as scam.

Abstract: One embodiment disclosed relates to a system for detecting anomalous messaging, discovering compromised accounts, and generating responses to threatened attacks. The system utilizes API commands and log forwarding for interaction and communication between a messaging and account hunting platform, other hunting platforms, an action center, and a security operations center. Another embodiment relates to a method of, and system for, performing a complete root cause analysis. Another embodiment relates to a method of, and system for, anomaly discovery which may advantageously utilize reference data to correlate different anomalies for reporting as a single incident.

Abstract: A smart home includes Internet of things (IOT) devices that are paired with an IOT gateway. A backend system is in communication with the IOT gateway to receive IOT operating data of the IOT devices. The backend system generates a machine learning model for an IOT device. The machine learning model is consulted with IOT operating data of the IOT device to detect anomalous operating behavior of the IOT device. The machine learning model is updated as more and newer IOT operating data of the IOT device are received by the backend system.

Abstract: An email attempting to perpetrate a business email compromise (BEC) attack is detected based on similarity of the email to a known BEC email and on similarity of the email to a user email that would have been sent by the purported sender of the email. Metadata of the email is extracted and input to a BEC machine learning model to find the known BEC email among BEC email samples. The extracted metadata are also input to a personal user machine learning model of the purported sender to generate the user email.

Abstract: A login page of an online service is received in a user computer. False credentials, such as a false user identifier (ID) and a false password, are entered into the login page to login to the online service. The login page is classified as phishing when the online service does not serve a legitimate login-fail page in response to the entry of the false credentials in the login page.

Abstract: A login page of an online service is received in a user computer. False credentials, such as a false user identifier (ID) and a false password, are entered into the login page to login to the online service. The login page is classified as phishing when the online service does not serve a legitimate login-fail page in response to the entry of the false credentials in the login page.

Abstract: A login page of an online service is received in a user computer. False credentials, such as a false user identifier (ID) and a false password, are entered into the login page to login to the online service. The login page is classified as phishing when the online service does not serve a legitimate login-fail page in response to the entry of the false credentials in the login page.

Abstract: A system for detecting phishing includes a phishing detection system that generates census of login pages received in different computers of different end users. An end user computer receives a login page and retrieves census information of the login page, such as from the phishing detection system. The census information indicates a number of different end users who employed the login page to log into their respective online accounts. The end user computer reports the census information to the end user of the end user computer. The end user computer reports the census information in numerical, graphical, or other format. The census information of the login page allows the end user to make an informed decision on whether or not to use the login page.

Abstract: A login page of an online service is received in a user computer. False credentials, such as a false user identifier (ID) and a false password, are entered into the login page to login to the online service. The login page is classified as phishing when the online service does not serve a legitimate login-fail page in response to the entry of the false credentials in the login page.

Abstract: A system for detecting phishing includes a phishing detection system that generates census of login pages received in different computers of different end users. An end user computer receives a login page and retrieves census information of the login page, such as from the phishing detection system. The census information indicates a number of different end users who employed the login page to log into their respective online accounts. The end user computer reports the census information to the end user of the end user computer. The end user computer reports the census information in numerical, graphical, or other format. The census information of the login page allows the end user to make an informed decision on whether or not to use the login page.

Abstract: Detection of fake antivirus includes classifying text content of a user interface of an application program and scanning files associated with the application program for suspicious code. The user interface may be a graphical user interface (GUI) window of the application program. The text content may be obtained from a painted portion of the GUI window and by intercepting text changing operations performed on the GUI window. The text content may be input to a learning model to determine whether or not the application program belongs to the antivirus category. The application program is deemed to be fake antivirus when the application program is classified as belonging to the antivirus category and has a file with suspicious code.

Abstract: Detection of fake antivirus includes classifying text content of a user interface of an application program and scanning files associated with the application program for suspicious code. The user interface may be a graphical user interface (GUI) window of the application program. The text content may be obtained from a painted portion of the GUI window and by intercepting text changing operations performed on the GUI window. The text content may be input to a learning model to determine whether or not the application program belongs to the antivirus category. The application program is deemed to be fake antivirus when the application program is classified as belonging to the antivirus category and has a file with suspicious code.

Abstract: A clamping structure of an electronic device for fastening an electronic device to a host inside of electronic equipment includes a supporting device and a tray. The supporting device has a space, which has a clamping tab, an L-shape orientation member, a guiding tab, and a fixed lock that are disposed therein. The tray is accommodated with an electronic device, the bottom of which has a clamping slot. One side of the tray has a projection and a track projection. The tray is disposed in the space of the supporting device and is moved a predetermined distance. The fixed lock, the guiding tab, the L-shape orientation member, and the clamping tab of the supporting device are respectively clamped to the track projection, the projection and the clamping slot of the tray. Therefore, the electronic device is convenient for assembling, detaching, and maintenance.

Abstract: The present invention is to provide a structure for quickly installing and removing an optical disk drive comprising an optical disk drive frame and a main frame, wherein the optical disk drive frame has a vertical wall surface on one side, a side bracket on the other side, a sliding channel disposed adjacent to the side bracket, a latch member disposed on the sliding channel and capable of moving along the sliding channel back and forth, and a push button disposed at the bottom of the latch member. When an optical disk drive is mounted onto the optical disk drive frame, the push button is pushed to move the latch member forward and press against the edge of the optical disk drive, enabling the optical disk drive to be fixed onto the optical disk drive frame.

Abstract: The present invention is to provide a drawer-type computer casing comprising a box and a sliding frame, wherein the box comprises an opening on one side, a connecting section disposed respectively on both corresponding sides of the opening and an accommodating space therein, and the sliding frame can be accommodated in the accommodating space and comprises a latching member movably coupled to an end surface of the box at the position corresponding to the connecting section, such that when the sliding frame is installed in the accommodating space, the latching member will be set precisely on the corresponding position of the connecting section. Therefore, the latching member can be moved into the connecting section to connect the box and the sliding frame together without using screws.

Abstract: The present invention is to provide a structure for quickly installing and removing an optical disk drive comprising an optical disk drive frame and a main frame, wherein the optical disk drive frame has a vertical wall surface on one side, a side bracket on the other side, a sliding channel disposed adjacent to the side bracket, a latch member disposed on the sliding channel and capable of moving along the sliding channel back and forth, and a push button disposed at the bottom of the latch member. When an optical disk drive is mounted onto the optical disk drive frame, the push button is pushed to move the latch member forward and press against the edge of the optical disk drive, enabling the optical disk drive to be fixed onto the optical disk drive frame.

Abstract: The present invention is to provide a drawer-type computer casing comprising a box and a sliding frame, wherein the box comprises an opening on one side, a connecting section disposed respectively on both corresponding sides of the opening and an accommodating space therein, and the sliding frame can be accommodated in the accommodating space and comprises a latching member movably coupled to an end surface of the box at the position corresponding to the connecting section, such that when the sliding frame is installed in the accommodating space, the latching member will be set precisely on the corresponding position of the connecting section. Therefore, the latching member can be moved into the connecting section to connect the box and the sliding frame together without using screws.

Abstract: The present invention is to provide a mechanism for quickly removing an electronic device from a PC having a smaller case, which comprises a slot in the PC having one or more recesses at either side, enabling a tray installed with the electronic device to be inserted therein through a front opening of the slot and enabling one or more snapping members on either side of the tray to be adapted to snap into one or more recesses on the slot. In an operation of removing the electronic device from the PC, a user may pull a first clinging member of a pivotal gate at the front opening to open a gate upward, and then hold a handle of the tray to quickly pull the tray toward the front opening of the slot.

Abstract: The present invention is to provide a mechanism for quickly removing an electronic device from a PC having a smaller case, which comprises a slot in the PC having one or more recesses at either side, enabling a tray installed with the electronic device to be inserted therein through a front opening of the slot and enabling one or more snapping members on either side of the tray to be adapted to snap into one or more recesses on the slot. In an operation of removing the electronic device from the PC, a user may pull a first clinging member of a pivotal gate at the front opening to open a gate upward, and then hold a handle of the tray to quickly pull the tray toward the front opening of the slot.