Facebook users are being hit by two cyber attacks.
As many as three-quarters of a million users have been receiving fake password reset messages bearing subject lines such as "Facebook Password Reset Confirmation" and include a file attachment, reports Computerworld. The file includes the "Bredlab" Trojan downloader that installs attack code and rogue antivirus applications on the compromised PCs.
The other attack involves the ZeuS banking Trojan, according to USA Today. It sends a similar message about activating a new log-in system. CNET News offers a screen shot of the fake message. After users enter their password to a download an "update tool," the Trojan lurks on the hard drive waiting for a chance to steal online banking log-in information.