Telecommunication fraud Trojan horse program intercepting method and device, terminal and storage medium

Abstract

The invention discloses a telecommunication fraud Trojan horse program intercepting method and device, a terminal and a storage medium, and belongs to the field of network security. The method comprises the steps that it is monitored whether or not a program in the terminal initiates network connection; if yes, process information and communication information of the program are acquired, the process information at least comprises a process path corresponding to the program, and the communication information at least comprises a communication port corresponding to a network linking; accordingto the communication port, it is identified whether or not the program is a remote control program; if yes, according to a file under the process path, it is identified whether or not the program haspreset telecommunication fraud features; if yes, the program is determined as a telecommunication fraud Trojan horse program and is intercepted. According to the method, based on the communication port and the process file, program interception is achieved, and the problem that labeling is not timely so as to cause low interception rate is solved, thereby improving the detection and interception rate of novel telecommunication fraud Trojan horse programs.

Description

technical field [0001] The embodiments of the present application relate to the technical field of network security, and in particular to a method, device, terminal and storage medium for intercepting telecommunications fraud Trojan programs. Background technique [0002] The rapid development of Internet technology brings convenience to people's daily life, but also brings many security risks. For example, criminals began to use the Internet to carry out telecom fraud. [0003] When criminals commit telecommunications fraud, they first fabricate false information through phone calls, the Internet, or text messages to lure victims into the scam, and then instruct victims to download and install telecommunications fraud Trojan horse programs, so as to remotely control the victim's terminal through telecommunications fraud Trojan horse programs Perform transfer operations. In order to reduce the incidence of telecom fraud, more and more antivirus applications have begun to h...

AI Technical Summary

Problems solved by technology

[0005] The embodiment of this application provides a method, device, terminal and storage medium for intercepting telecommunications fraud Trojan horse programs, which can solve the problem of realizing the interception function based on marked telecommunications fraud Trojan horse programs. At this time, the new type of telecommunications fraud Trojan horse program cannot be identified and intercepted in time, resulting in a low success rate of telecommunications fraud Trojan horse interception

Images