During routine security work, social media giant identifies network of hackers using suspicious links and fake websites; under 500 people targeted