Attackers are sending spoofed pending notification emails to Facebook users, claiming that the recipients overlooked some alert on the world s largest social network. In reality, the emails send users to a series of compromised websites hosting the Black Hole Exploit Kit, according to researcher Dancho Danchev. The malicious email, which can be seen below, is crafted to and does a serviceable job of mimicking Facebook’s widely-recognizable interface. It also contains a typo that is indicative of the sorts of writing errors that have become a hallmark of spam campaigns in general.
Source: https://threatpost.com/fake-facebook-alert-emails-link-black-hole-sites-112712/77247/