Don’t open any e-mail messages or attachments that appear to be from Facebook regarding resetting your password. This trojan has been circulating since the end of October, but I just received a copy of the spoofed e-mail this morning.
More information –
Massive bot attack spoofs Facebook password messages