Users are persuaded in chats initiated by the hackers to divulge security verification and pin codes.