The Iranian COBALT GYPSY threat group uses social media to build trust with targets.