McAfee Labs is reporting a new password reset scam targeting Facebook users. Users have been receiving e-mails claiming to be from Facebook that tell them to download an attachment. This attachment of course contains malware and password stealing Trojans. The types of passwords that were targeted weren't specified, though it can be inferred that bank and e-mail accounts were on the list. McAfee speculates that the attack originated from the Cutwail or Rustock botnets. If you receive any suspicious e-mails, be sure to delete them, and remember that Facebook will never ask you for your password or tell you to reset it through e-mail.