among other things , embodiments of the present disclosure help provide entities with the ability to remotely detect behavior associated with malware and identify compromised user - sessions , regardless of the malware variant or family , and independently of the page structure .