Methods and systems for cyber-hacking detection are provided. One method includes generating, by a processor, one or more artificial accounts for a type of actual account, learning one or more hacking behaviors for the type of actual account, and detecting cyber-hacks in activity in the one or more artificial accounts based on the one or more hacking behaviors. Systems and computer program products for performing the above method are also provided.