Malicious hackers have spammed out an attack that pretends to be an email from Facebook support saying that your password has been changed. The messages have a ZIP file with a Trojan horse attached which carries a new password. The Trojan horse is known as Mal/BredoZp-B, and the ZIP file is detected by Sophos products as Mal-Bredo-B-B. Naked Security expert Graham Cluley says the attack is an attempt to fool Facebook users into believing they have changed their password.”]
Source: https://grahamcluley.com/new-password-from-facebook-beware-widely-spread-malware-attack/