According to the FBI, hackers used social engineering tactics - including a new type of phishing attack - to gain access to Salesforce accounts. Here's how.