Hackers target unsecured Amex and SnapChat sites to steal user data