Facebook users need to be very careful online.  Between games that try to spam every one you know to sites that use your connection to Facebook as a wedge to trick you into opening the door for their viruses....

A user might, for instance, get an email that has all of the theming and imagery of a typical message from Facebook, except that this email will tell the user that they need to reset their password and will offer that user a login prompt to do so. The user clicks on the prompt, is directed to a fake webpage that looks like Facebook, and then the user enters their login and password. Just like that the phishing attack has succeeded.

Read the full page on the Kaspersky blog.