Security firm warns of new scam campaign on social media