Below is a direct quote from PC World.
“Facebook’s 400 million users have been targeted by a spam run that could infect their computers with malicious software designed to steals passwords and other data, according to security researchers at McAfee.
“Over the last two days, millions of messages have been sent, which McAfee detected through customers running the company’s security software, said Dave Marcus, McAfee’s director of security research and communication.
“The messages appear to come from Facebook, with a return address that looks legitimate but has been spoofed, such as "email@example.com," Marcus said”
To read the rest of this article click here.