Emails claiming to come from ‘The Facebook Team’ claim to have changed your password. The from address has been forged, and the attached file is in fact a piece of malware. The emails are not really from Facebook and have been spammed out widely across the internet. (Sophos detects the malware as Troj/BredoZp-M or Mal /Bredo-A) The emails all have the subject line Facebook password resent confirmation email, claim that the recipients new password is contained.”]
Source: https://grahamcluley.com/facebook-password-reset-confirmation-emails-carry-malware/