I'm not asking how to hack social media sites. I want to know what parameters are used and what the level of effort would be to do something like this? Would you rely mostly on the source code? Would you need a lot more than that? etc.
Create a shock article with a false title provoking social media users to click it and have it redirect them to a malicious server that asks them to re-authenticate to view the story and just begin collecting mass amounts of credentials into a SQL database; then use SQL queries to export everything into a text file and post it on the Dark Web..