Voight-Kampff for Email Addresses

Explore the world of email address reputation and its role in identifying spear-phishing and fraud in this conference talk from Shmoocon 2020. Dive into the concept of EmailRep, a system that uses OSINT techniques, crawlers, and data from various sources to predict the risk associated with email addresses. Learn about the technical architecture, implementation, and how both blue and red teams can utilize this tool. Discover the importance of internet history in differentiating legitimate email addresses from attacker personas, and understand the potential shortcomings of this approach. Gain insights into the various data points used, including social media profiles, Github activity, LinkedIn accounts, and credential dumps. Follow along as the speaker demonstrates live queries of EmailRep and discusses its free availability through emailrep.io or API.