It's an attack vector used by government agencies.

As long as people don't identify the social hack, this will go on.