A sophisticated phishing campaign is exploiting the desire for Facebook's blue tick verification, potentially compromising over 30,000 accounts.