A proposed plan to charge users for the platform’s coveted blue check mark has, unsurprisingly, inspired attackers to try to dupe people into giving up their credentials.