Not even two of the biggest US technology firms are safe from fraud, as the social network and the search company named as victims of sophisticated attack