More Facebook Malware

I guess the crew behind Bredo has found something they like because they have been on a fake Facebook malware campaign for quite a while now. This morning they've been hitting us with a couple more variants of the Bredo Trojan delivered in emails that pretend to be from the Facebook staff. These, much like the others from these guys, are trying to look like security upgrades. These inform you that your password has been changed and you can find the new one in the zipped up attachment, but of course, it's malware instead. Inside the zip is actually an executable that sports a Excel icon. I'd expect a password to come in a text document of some sort, wouldn't you?!
Be very careful about opening any attachment in your email especially if it appears to come from Facebook, or Twitter, or anything else that's currently popular.