The reach of social media is staggering. As of January 2019, there were estimated to be 3.5 billion active users of social media. Organizations use social media to directly connect with consumers, but the reach and influence of social media make it an attractive target for cybercriminals. As a result, social media has become a platform used for many different types of social engineering attacks. This paper discusses how social media is being used to attack organizations, their employees, and their customers.