How a Facebook Phishing Scam Swipes Credit-Card Data