"What’s interesting with this particular scheme is how involved the original poster is," said Jérôme Segura, a security researcher at Malwarebytes.