ARRANGEMENT AND A METHOD OF THREAT DETECTION IN A COMPUTING DEVICE OR A COMPUTER NETWORK

A method of threat detection in a computing device or network includes determining that a financial related service is accessed with the computing device, determining during an active session or connection to the financial related service that an application of the computing device is requesting network access and checking the reputation of the application. Based thereon, blocking network access if the application or the process is not a trusted application or a trusted process, scanning memory of the computing device used by the application or the process for malicious or unusual content if the application is a trusted application or the process is a trusted process, and if scanning indicates no malicious or unusual content, granting network access to the application or the process, and if scanning of the application or the process indicates malicious or unusual content, blocking network access for the application or the process.