Email Babel: Does Language Affect Criminal Activity in Compromised Webmail Accounts?
Emeric Bernard-Jones, Jeremiah Onaolapo, Gianluca Stringhini

TL;DR
This study investigates how the language setting of webmail accounts influences cybercriminals' ability to find sensitive information, revealing that language significantly impacts access success and highlighting the importance of language in cybersecurity.
Contribution
The paper provides empirical evidence that language affects cybercriminals' navigation and information retrieval in compromised webmail accounts, using a novel honeypot experiment across multiple languages.
Findings
Greek accounts had higher success in revealing sensitive info.
Financial terms were among the most accessed keywords.
Language significantly influences cybercriminals' ability to locate sensitive data.
Abstract
We set out to understand the effects of differing language on the ability of cybercriminals to navigate webmail accounts and locate sensitive information in them. To this end, we configured thirty Gmail honeypot accounts with English, Romanian, and Greek language settings. We populated the accounts with email messages in those languages by subscribing them to selected online newsletters. We hid email messages about fake bank accounts in fifteen of the accounts to mimic real-world webmail users that sometimes store sensitive information in their accounts. We then leaked credentials to the honey accounts via paste sites on the Surface Web and the Dark Web, and collected data for fifteen days. Our statistical analyses on the data show that cybercriminals are more likely to discover sensitive information (bank account information) in the Greek accounts than the remaining accounts, contrary…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsSpam and Phishing Detection · Internet Traffic Analysis and Secure E-voting · Cybercrime and Law Enforcement Studies
