Attackers turn to such sites to glean information about individuals to help craft personal-sounding messages with booby-trapped files, which victims click on and unknowingly release malware into an organization, he says.
WSJ: Tech Companies Struggle to Keep Hackers at Bay