The Facebook Security Team

Got a facebook account? Maybe you'd like to get it fixed because a hacker just got in...

The link was:

which looks very similar to a link Facebook would send you, but really... they would NEVER use a 3rd party like that for the purpose stated here. Anyway, if you gave away your password following such a link, good luck to you!

Return-Path: <>
X-Greylist: delayed 344 seconds by postgrey-1.34 at jc; Sat, 13 Dec 2014 13:20:55 PST
Received: from ( [])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by (Postfix) with ESMTPS id 7F9F7CE0321
	for ; Sat, 13 Dec 2014 13:20:55 -0800 (PST)
Received: by (Postfix, from userid 10016)
	id 58C3328807D9; Sat, 13 Dec 2014 22:14:02 +0100 (CET)
Subject: Facebook password change
X-PHP-Originating-Script: 10016:object.php(241) : eval()'d code
From: "Facebook" <>
X-Mailer: Fscfz(ver.2.75)
Reply-To: "Facebook" <>
Mime-Version: 1.0
Content-Type: multipart/alternative;boundary="----------1418505242548CAC1A18B06"
Message-Id: <>
Date: Sat, 13 Dec 2014 22:14:02 +0100 (CET)

Your Facebook password was been reset on Saturday, December 13, 2014 at 09:13PM (UTC) due to suspicious activity of your account.

Operating system: Windows
Browser: Google Chrome
IP address:
Estimated location: Lincoln, MO, US

To restore the password complete this form, please, your request will be considered within 24 hours.

The Facebook Security Team
  Facebook, Inc., Attention: Department 425, PO Box 10005, Palo Alto, CA 94303