Security experts are warning of socially engineered threats targeting users this holiday season.