Businesses face substantial risks to their finances and data as cyber criminals target social media and company websites to access sensitive information used in attacks, new research has found.