If you are a user of Facebook and get an email saying “your password has been reset” with a attachment to open, just delete the email. A new scam/trojan attack is making the rounds, and this one is specifically targeting users of Facebook.

According to the tech site Neowin, Facebook users may get an email saying… “their password has been reset, and that the attached zip archive contains their new password. Instead of a new password, users will find a trojan downloader.”

Once the trojan is opened, it will go out over the internet and grab more viruses and malware to download to the infected PC. The article says there are “around 735,000 of the phony Facebook messages since Monday”, so this thing is only getting bigger.

Make sure to update your antivirus definitions this weekend, and it would be a good idea to set your antivirus application to run a full scan while you are out for Halloween.