3 Yahoo! Research, New York, USA [email protected] Abstract. In the face of large-scale automated social engineering at-tacks to large online services, fast detection and remediation of com-promised accounts are crucial to limit the spread of the attack and to mitigate the overall damage to users, companies, and the public at large.