Hackers have found a new use for the social network, controlling their botnets to spew out spam and steal passwords.