An email claiming to be from Facebook is making the rounds. The email claims your password has been changed and you need to open the attached zip file to get the new one.
Currently, few of the AV vendors are identifying this as malware.
If you receive this email, delete it. It is NOT from Facebook and your password has not been changed. – Source MX Labs