A system for creating, managing, and monitoring social network, SN, honeypots that trap attempts to attack an organization's infrastructure through its employees during the reconnaissance phase of an Advanced Persistent Threat, APT, the system comprising: (a) a SN Crawler module comprising at least one plugin (20a...20n), wherein each plugin comprises software adapted to extract actual user SN profiles of the target organization and/or similar organizations from a designated SN and insert said extracted actual SN profiles into a Profiles Database of profiles; (b) the Profiles Database which comprises the actual SN profiles extracted by the at least one plugin (20a...20n) of the SN Crawler module; (c) an Artificial Profile Generator Module adapted to generate massive numbers of artificial profiles of artificial users by using statistical information extracted from actual SN profiles stored in the Profiles Database and to connect the artificial profile with other real and artificial profiles in a social network; (d) a Profile Manager module adapted to wire the artificial profile in the SN by taking actions including identifying the best location in the target social network for seeding the artificial profile, accepting friendship requests, proposing friendship requests and sending posts and messages on behalf of the artificial profile that will affect the artificial profile in the SN; (e) a Profile Monitoring module comprising monitoring software adapted to collect events relating to the artificial profiles and comprising detectors, software, and scanning logic adapted to collect emails sent to specific honeypot mailboxes created for artificial users to which it has been granted access; to store the email content including timestamp, sender, recipients, subject, content, attachments and URLs in a database; and to scan and detect any attachments and URLs for possible threats, and to notify a human system manager of every event relating to the artificial profiles and the honeypot mailboxes; and (f) a Management GUI module comprising a graphical user interface that supports the entire process of creating, managing, and monitoring the SN artificial profiles by allowing the human system manager to carry out activities such as activating specific crawling tasks, viewing the crawled profiles and the topology they create, zooming into profiles and viewing the events related to honeypots by exploring the emails and scanning results; in that: the Management GUI module also comprises software adapted to perform reoccurring scanning of historical attachments and URLs collected and stored by the Profile Monitoring module. (a) a SN Crawler module comprising at least one plugin (20a...20n), wherein each plugin comprises software adapted to extract actual user SN profiles of the target organization and/or similar organizations from a designated SN and insert said extracted actual SN profiles into a Profiles Database of profiles; (b) the Profiles Database which comprises the actual SN profiles extracted by the at least one plugin (20a...20n) of the SN Crawler module; (c) an Artificial Profile Generator Module adapted to generate massive numbers of artificial profiles of artificial users by using statistical information extracted from actual SN profiles stored in the Profiles Database and to connect the artificial profile with other real and artificial profiles in a social network; (d) a Profile Manager module adapted to wire the artificial profile in the SN by taking actions including identifying the best location in the target social network for seeding the artificial profile, accepting friendship requests, proposing friendship requests and sending posts and messages on behalf of the artificial profile that will affect the artificial profile in the SN; (e) a Profile Monitoring module comprising monitoring software adapted to collect events relating to the artificial profiles and comprising detectors, software, and scanning logic adapted to collect emails sent to specific honeypot mailboxes created for artificial users to which it has been granted access; to store the email content including timestamp, sender, recipients, subject, content, attachments and URLs in a database; and to scan and detect any attachments and URLs for possible threats, and to notify a human system manager of every event relating to the artificial profiles and the honeypot mailboxes; and (f) a Management GUI module comprising a graphical user interface that supports the entire process of creating, managing, and monitoring the SN artificial profiles by allowing the human system manager to carry out activities such as activating specific crawling tasks, viewing the crawled profiles and the topology they create, zooming into profiles and viewing the events related to honeypots by exploring the emails and scanning results; in that: the Management GUI module also comprises software adapted to perform reoccurring scanning of historical attachments and URLs collected and stored by the Profile Monitoring module.