...detect this through the Facebook Security Page." Facebook said that users should be "suspicious of unexpected emailsclaiming to be from Facebook." The company also said that it will never send users a new password as an attachment. ...
http://news.cnet.com/8301-17939_109-10384028-2.html