I received this Facebook Password Reset Confirmation Email but did not open it coz I did not request for password reset from Facebook. It was sent to my other email address and not with the one I’m using for Facebook. Funny! 😀
I initially thought it has a virus. It contains attachment and the email details in the message headers did not come from Facebook email servers.
According to Mashable
Another new virus is spreading through social networks, this time, via Facebook. This one – known as Bredolab – masks itself as a “Password Reset Confirmation Email,” appears to come from Facebook, and attaches a file that purports to contain a new password.
That file is actually a trojan horse that will download a host of nasty files from the Web and infect your computer with them.
So if you didn’t ask for password confirmation, don’t dare open any password reset email especially if it has attachment. Just ignore and delete it.