Scammers are hijacking comment threads with believable fake alerts that direct you to credential-stealing sites. Get our practical tips to protect your profile.