Most victims were lured to phishing websites from comments posted by impersonator accounts on X.