Web criminals are getting much more personal in their attacks, using social networking sites and other databases to make their story lines much more believable.