1. A method for alerting a user to abnormal micro-blog activity comprising: parsing received micro-blog messages to form vectors of words and/or phrases; aggregating the words and/or phrases in a plurality of vectors of words and/or phrases to form aggregated vectors of words and/or phrases; examining the received micro-blog messages by classifying the aggregated vectors of words and/or phrases in accordance with rules to form a prediction; and alerting a user when abnormal activity is detected by alerting the user when the prediction exceeds a predetermined level.