So this was on yahoo this morning. It's been there since Wednesday but I'm lazy and just noticed it today.

Wed Mar 17, 11:45 PM

WASHINGTON (AFP) - Computer hackers are targeting Facebook users with an email scam that attempts to steal their passwords, Web security firm McAfee said.
ADVERTISEMENT

McAfee said on Wednesday some users of the world's most popular social networking site were receiving emails that appeared to be from Facebook informing them their Facebook password had been reset and to click on an attachment to retrieve it.

The security firm said the attachment is actually a "password stealer" that is installed when a user clicks on it and can potentially access any username and password combination on that computer, not Facebook-related information.

"This threat is potentially very dangerous considering that there are over 350 million Facebook users who could fall for this scam," McAfee said in a statement.

The subject line of the scam email reads: "Facebook Password Reset Confirmation! Customer Support."

McAfee advised anyone receiving the password-reset message to delete it and to not open the attachment.

Because of its huge membership, Facebook is a frequent target of computer hackers seeking to steal passwords.

In its 2010 Threat Predictions report released in December, McAfee said email "was increasing in popularity as the preferred method for targeting attacks against individual users, corporations and government institutions."

OMG. I got this email the other day & I ALMOST clicked on it. But it looked too suspicious & tried my password on facebook to make sure it hadn't been changed & then just deleted it.

i got this email in my spam box. yahoo mail does a pretty good job of weeding that out. facebook etc never just randomly changes your password, you have to do it yourself. those spam emails usually have a fake email. i get ones from "ebey" telling me my payment didn't go through and to try again. lol.

It's hilarious because I always get e-mails like that, but they're sent to e-mails that aren't even linked to that particular site. I get "paypal" e-mails and I've never even had an account before. I also always get these facebook e-mails sent to my personal account which is not even registered with facebook.

Yeah, I got one for facebook and I don't have facebook. Apparently I need to reset the password on my non-existent facebook account. Should I be concerned? Lol Idiots need to pay attention to shit.

Me too with the Paypal emails. And I get emails from banks that I don't even have accounts with. xD

I actually got a text message telling me to text my account information...for a bank that I've never had an account with. Even if I did have an account...like I'm really going to text message my account numbers and pin numbers...

Looking back, I wish I would have replied with a text that said, "Go fuck yourself." lol.

"Dear user of facebook,

Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
Your Facebook."

Is the email I received this morning. Grr.

Yeah it pretty much blows, eh? I got the same one. I didn't open the file, though because it seemed sketchy.