Authors:
Meike Nauta
1
;
Mena Habib
2
and
Maurice van Keulen
1
Affiliations:
1
University of Twente, Netherlands
;
2
Maastricht University, Netherlands
Keyword(s):
Hacked Account Detection, Social Media.
Related
Ontology
Subjects/Areas/Topics:
Social Media Analytics
;
Society, e-Business and e-Government
;
Web Information Systems and Technologies
Abstract:
Social media accounts are valuable for hackers for spreading phishing links, malware and spam. Furthermore,
some people deliberately hack an acquaintance to damage his or her image. This paper describes a classification
for detecting hacked Twitter accounts. The model is mainly based on features associated with behavioural
change such as changes in language, source, URLs, retweets, frequency and time. We experiment with a Twitter
data set containing tweets of more than 100 Dutch users including 37 who were hacked. The model detects 99% of the malicious tweets which proves that behavioural changes can reveal a hack and that anomaly-based features perform better than regular features. Our approach can be used by social media systems such as Twitter to automatically detect a hack of an account only a short time after the fact allowing the legitimate owner of the account to be warned or protected, preventing reputational damage and annoyance.