Employee training is key to any business's defense against cyberattacks. According to PhishMe, an estimated 91% of cyberattacks start with a phishing email -- an attempt to secure personal or sensitive information by posing as a legitimate actor. It makes sense then that many businesses focus cybersecurity training on recognition of email phishing scams. However, recent studies show that cybercriminals are increasingly turning to social media to bait their prey. In 2016, social media phishing increased by an estimated 500%, and victims are more likely to fall for these scams. Cybersecurity training needs to adapt to this fast-growing form of attack.