If you get an e-mail that appears to be from Facebook saying the company reset your password and urging you to open an attachment, it is a scam. ...
The attachment contains a password stealer that can potentially access any username and password combination used on the computer, not just the login credentials for Facebook....
See screenshot at either of these links:
Beware the new Facebook password reset scam | InSecurity Complex - CNET News
McAfee Security Insights Blog » Blog Archive » Facebook Password Reset Scam Threatens Computers Worldwide
Edit 3-19-2010 to add additional information:
Facebook is warning its users about BredoLab malware serving campaign using the well known “Facebook Password Reset Confirmation Customer Support” social engineering theme. Facebook password reset themed malware campaign in the wild | Zero Day | ZDNet.com
According to Gary Warner, the UAB director of research in computer forensics most antivirus not detecting these computer viruses:
Cyber-criminals are using fake e-mails to target Facebook users and deliver computer viruses that were being detected only by one-third of the 42 most common anti-virus products as of noon Thursday, March 18, says a leading cyber-crime researcher at the University of Alabama at Birmingham (UAB).
New Spam Targeting Facebook Users Is Invisible to Most Virus Scans, Says UAB Expert
Edited by tork, 19 March 2010 - 06:56 AM.


Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Back to top










