The group known as Charming Kitten used malicious links to capture login credentials and steal data, CERTFA said.