# SPOT - Spear-Phishing Overwatching Tool — Mathieu Fourcroy, Pauline Bourmeau (Cookie), William Robinet

**URL:** <https://discourse.ossbase.org/t/spot-spear-phishing-overwatching-tool-mathieu-fourcroy-pauline-bourmeau-cookie-william-robinet/1181>\
**Category:** 2026 talks / workshops\
**Tags:** talk, hack.lu, 2026\
**Created:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/spot-spear-phishing-overwatching-tool-mathieu-fourcroy-pauline-bourmeau-cookie-william-robinet/1181 "2026-10-07T08:52:01Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![system](https://discourse.ossbase.org/uploads/default/original/1X/4713f3d4fec85f7513775fc2dd36f548a49f8faa.jpeg) [@system](https://discourse.ossbase.org/u/system)\
**Post date:** [October 7, 2026, 8:52am UTC](https://discourse.ossbase.org/t/spot-spear-phishing-overwatching-tool-mathieu-fourcroy-pauline-bourmeau-cookie-william-robinet/1181/1 "2026-10-07T08:52:02Z")

</div>

**Join us at hack.lu 2026 — [Info & Registration](https://2026.hack.lu/info/)**

**Duration:** 30 min  
  
**Type:** Talk  
  
**Speakers:** Mathieu Fourcroy, Pauline Bourmeau (Cookie), William Robinet

**Abstract**

Nowadays, the detection of generic mass-scale phishing attacks is quite effective. Techniques that leverage indicators of compromise (IOCs) collection and sharing tools, such as MISP (the Open Source Threat Intelligence Sharing Platform), are well established and give good results in the field. However, detection of targeted attack attempts aka spear-phishing, is much more challenging because the attackers exploit contextual information about the targets they aim for.  
By using up-to-date, relevant and precise information about the inner operations of the targeted company, attackers can make their deception far more effective.  
SPOT makes use of state-of-the-art natural language processing (NLP) techniques based on machine learning (ML) and large language models (LLMs) in particular to try to detect and prevent spear-phishing attack attempts.

**Description**

This talk covers the architecture of the project, challenges we encountered and design choices we made during development.  
This opensource project was co-financed by the LU-CID initiative by the Ministry of Economy Luxembourg.

[View on pretalx](https://pretalx.com/hack-lu-2026/talk/LYVXLS/)