14. A method of finding a compromised social networking account, the method comprising: receiving a first set of social messages in a computer system, the first set of social messages being received over the Internet from a social networking site of a social networking service; identifying a first set of compromised social networking accounts from the first set of social messages; extracting keywords indicative of a compromised social networking account from the first set of compromised social networking account; searching the social networking site for a second set of social messages that contain the keywords; and receiving in the computer system search results responsive to the searching of the social networking site, the search results including the second set of social messages.
20. The method of claim 14 , further comprising: finding a second set of compromised social networking accounts from the second set of social messages.