Malicious hackers have spammed out an attack that pretends to be an email from Facebook support saying that your password has been changed.
The messages, which have a variety of subject lines including "Facebook Service. A new password is sent you", "Facebook Support. Your password has been changed" and "Facebook Service. Your account is blocked", have a ZIP file attached which carries a Trojan horse.

It's possible that the attackers are attempting to exploit the problems many female Facebook users had this week when the social network disabled many accounts by accident.
Don't forget - you should always be extremely suspicious of any unsolicited email which arrives out of the blue, encouraging you to open an attachment.
source: http://nakedsecurity.sophos.com/2010/11/18/new-password-from-facebook-beware-widely-spread-malware-attack/
The messages, which have a variety of subject lines including "Facebook Service. A new password is sent you", "Facebook Support. Your password has been changed" and "Facebook Service. Your account is blocked", have a ZIP file attached which carries a Trojan horse.

Good afternoon.Sophos products detect the attached ZIP file as Mal/BredoZp-B, and the Trojan horse contained within as Troj/Agent-PLG.
A spam is sent from your Facebook account.
Your password has been changed for safety.
Information regarding your account and a new password is attached to the letter.
Read this information thoroughly and change the password to complicated one.
Thank you for your attention,
Facebook Service.
It's possible that the attackers are attempting to exploit the problems many female Facebook users had this week when the social network disabled many accounts by accident.
Don't forget - you should always be extremely suspicious of any unsolicited email which arrives out of the blue, encouraging you to open an attachment.
source: http://nakedsecurity.sophos.com/2010/11/18/new-password-from-facebook-beware-widely-spread-malware-attack/