Instead of waiting for users to open suspicious emails, scammers now place traps exactly where people spend hours every day - on social media.