There are at least two Facebook “change-your-password” scams circulating in spam. Here’s the first one. It tries to lure you to a malicious site to steal your Facebook login information.
A second one comes with an attachment that installs the Bredolab Trojan.
That story here.
Tom Kelchner