you've probably already seen this, but just in case: source = http://sanjose.bizjournals.com/sanjose/stories/2010/03/15/daily74.html?ed=2010-03-18&ana=e_du_pub Password-stealing virus targets Facebook users Silicon Valley / San Jose Business Journal McAfee Inc. warned Facebook Inc.'s 400 million users Wednesday that a new type of virus is trying to steal their bank passwords and other secret information about them. Palo Alto-based Facebook also issued a status update Wednesday warning about bogus e-mail containing viruses and advised its users of its social networks to delete the e-mail and warn their friends. The e-mail's recipients that the passwords on their Facebook accounts have been reset and asks them to click on an attachment to get new login credentials. If they do this, McAfee warns that triggers the download of several types of malicious software, including a program that steals passwords. Tens of millions of the spam were sent across Europe, the United States and Asia since the campaign began on Tuesday, McAfee said. Dave Marcus, McAfee's director of malware research and communications, told Reuters that he expects the hackers will succeed in infecting millions of computers. "With Facebook as your lure, you potentially have 400 million people that can click on the attachment. If you get 10 percent success, that's 40 million," the news service quoted him as saying. The bogus email is titled "Facebook Password Reset Confirmation! Customer Support."