A new attack appears to be aimed at jobseekers in marketing and social media roles who may have access to Facebook business accounts belonging to their current employer.