Spammed-out emails appear to be from a third-party website instead of Facebook. The website is pretending to be Facebook and it shows a preview frame from a sexy dance video. All you need to do is download an updated version of Adobe Flash to view the video. Those with an interest in IT security know by now that they should only ever download a new version of Flash from Adobes own website, but there are plenty of people out there who dont know that that is the sensible thing to do.”]
Source: https://nakedsecurity.sophos.com/2009/03/30/facebooks-hot-body-dance-videos-lead-malware/