If you get an e-mail that appears to be from Facebook saying the company reset your password and urging you to open an attachment, it is a scam. Repeat, it is a scam.
McAfee warned people in a blog post on Wednesday to beware of an e-mail that appears to come from Facebook urging recipients to open an attachment to get their new password.
The attachment contains a password stealer that can potentially access any username and password combination used on the computer, not just the login credentials for Facebook.
For more of this story, read Beware the new Facebook password reset scam on CNET News.