โšก ๐—™๐—ฟ๐—ฒ๐˜€๐—ต ๐—ง๐—ฎ๐—น๐—ธ ๐—”๐—น๐—ฒ๐—ฟ๐˜ ๐—ณ๐—ผ๐—ฟ ๐—•๐—ฆ๐—ถ๐—ฑ๐—ฒ๐˜€ ๐—Ÿ๐˜‚๐˜…๐—ฒ๐—บ๐—ฏ๐—ผ๐˜‚๐—ฟ๐—ด 2026!

๐ŸŽฃ๐Ÿง  ๐—ฆ๐—ฃ๐—ข๐—ง - ๐—ฆ๐—ฃ๐—˜๐—”๐—ฅ-๐—ฃ๐—›๐—œ๐—ฆ๐—›๐—œ๐—ก๐—š ๐—ข๐—ฉ๐—˜๐—ฅ๐—ช๐—”๐—ง๐—–๐—›๐—œ๐—ก๐—š ๐—ง๐—ข๐—ข๐—Ÿ โ€“ @paulinebourmeau (Cookie), Thibaut Diels, Mathieu Fourcroy, William Robinet (@wr)๐Ÿ”๐Ÿ“ง

Mass phishing is easy to detect. Targeted spear-phishing? Thatโ€™s where things get dangerous.

SPOT takes on this challenge by combining NLP, machine learning, and LLMs to detect highly targeted phishing attempts that exploit real organizational context. Instead of relying only on shared IOCs, this approach focuses on how attackers craft believable, personalized luresโ€”making detection smarter and more adaptive.

Developed as part of Luxembourgโ€™s LU-CID initiative, this open-source project showcases how AI can be used to fight back against increasingly sophisticated social engineering attacks.

Pauline Bourmeau (Cookie) is an independent security researcher working at the intersection of AI, cognitive psychology, and threat intelligence. Founder of DEFCON Paris and contributor to MISP, she has led NLP and deep learning initiatives and previously worked as a Threat Intelligence Analyst focusing on OSINT, HUMINT, and SOCINT.

Mathieu Fourcroy is Tech nerd and gamer, living in the past (on purpose). He is the main developer behind the SPOT project. He works as a dev engineer at Conostix S.A.

Thibaut Diels is a Systems/Infrastructure Developer at Conostix S.A. by day and Game Developer by night, with interests spanning Linux customization, gaming, and creative tech.

William Robinet manages the technical team at Conostix S.A. in Luxembourg and brings over 25 years of experience in cybersecurity using open-source technologies. He has presented at conferences like Nullcon and Hack.lu and contributes to tooling and research in areas like SSL/TLS and emerging ML systems.

๐Ÿ“ฑ Want to easily navigate all talks, villages, and stages?
Check out the official schedule on Hacker Tracker: https://hackertracker.app/schedule?conf=BSIDESLUX2026

๐Ÿ“… Conference Dates: 6โ€“8 May 2026 | 09:00โ€“18:00
๐Ÿ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
๐ŸŽŸ๏ธ Tickets: https://2026.bsides.lu/tickets
๐Ÿ“… Schedule Link: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg2026 #Phishing #SpearPhishing #ThreatIntelligence #OSINT #NLP #MachineLearning #CyberSecurity