Facebook Password Reset Confirmation Scam
The spam scammers have come up with a new one - the Facebook password reset confirmation email. I received this scam email this morning:
Subject Facebook Password Reset Confirmation
From: The Facebook Team [service@facebook.com]
Attachment: Facebook_Password_ca413.zip (23kb)
Content:
Hey kjy,
Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.
Thanks,
The Facebook Team
This is a scam. The email is not from Facebook and it is not a Facebook Password Reset Confirmation.
The scam email contains malware - don’t open it - delete it now and forget about it.
Don’t open the zip file!
If you receive a Facebook password reset email, we be interested to hear about it, particularly if the wording is different from the email we received - feel free to leave a comment. Have a great day.
6 Responses to “Facebook Password Reset Confirmation Scam”
October 29th, 2009 at 6:49 am
I received a similar Facebook password reset email last night.My facebook email had a couple of blue bars on it and looked more branded than the email you got - have you seen this one?
It hasn’t been sent to me yet, but when it is, I’ll feature it on the blog. Thanks Jo. BM
March 17th, 2010 at 2:43 pm
I’ve received several emails from “The Facebook Team” and “Facebook Support Team” both stating something about password reset with attachments. I added them to my junk mail without opening the attachments and then checked the web for possible viruses and sure enough!!
March 20th, 2010 at 2:33 pm
Hi all,
I got a fake email (scam) and below there’s the message including the headers. Do not open this kind of emails.
The best to all!
Return-path:
Envelope-to: arturo @nrwl.org
Delivery-date: Sat, 20 Mar 2010 04:51:17 -0700
Received: from [116.227.26.123] (helo=BLTBYNTGH)
(envelope-from )
id 1NsxCS-0004Bs-4H
Received: from 116.227.26.123 by smtp.secureserver.net; Sat, 20 Mar 2010 19:49:51 +0800
Message-ID:
From: “Your Facebook Team”
To:
Subject: Facebook Password Reset Confirmation NR.51077
Date: Sat, 20 Mar 2010 19:49:51 +0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=”—-=_NextPart_000_0006_01CAC823.73489E70″
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 4.71.1712.3
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.1712.3
Status: RO
X-Status: RT
X-KMail-EncryptionState: N
X-KMail-SignatureState: N
X-KMail-MDN-Sent:
Hey FB User ,
Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.
Thanks,
The Facebook Team.
Facebook_details_3472.zip
March 24th, 2010 at 8:26 pm
This is what it said in the email:
Dear user of facebook,
Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.
Thanks,
Your Facebook.
It looked phony so I scanned it with Microsoft Security Essentials and with Malwares Anti-malware and neither detected anything wrong with it. My Facebook looked OK…could access it…so I Googled it and saw it was a scam.

November 16th, 2009 at 6:38 pm
I got this email 3 weeks ago and being an idiot I opened it got a awful virus on my laptop and had anamerican company offering me sercurity toet rid of the virus, being silly I subscribed to this and it was a scam too! I paid out nearly £90 for this, now I have had to buy a bew laptop and had to stop my bank card so they don’t use my card in the future…Nightmare!
Kerry Roberts So sorry to hear that Kerry, but thanks for the cautionary tale! BM