Artifact modification and associated abuse detection

A method comprising:

• identifying artifacts in a plurality of messages of an account of a user;
• replacing the identified artifacts in the messages with respective modified artifacts while also maintaining in access-controlled storage at least information related to the identified artifacts;
• receiving from a requestor a request for a given one of the identified artifacts that has been replaced with a corresponding modified artifact;
• determining a profile of the requestor based at least in part on the request;
• making a security determination based at least in part on the determined profile;
• and
• taking at least one automated action based at least in part on the security determination;
• wherein the method is performed by at least one processing device comprising a processor coupled to a memory.

A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes said at least one processing device:

• to identify artifacts in a plurality of messages of an account of a user;
• to replace the identified artifacts in the messages with respective modified artifacts while also maintaining in access-controlled storage at least information related to the identified artifacts;
• to receive from a requestor a request for a given one of the identified artifacts that has been replaced with a corresponding modified artifact;
• to determine a profile of the requestor based at least in part on the request;
• to make a security determination based at least in part on the determined profile;
• and
• to take at least one automated action based at least in part on the security determination.