Facebook Spoofed in Malware Spam

A new Facebook email scam is making the rounds, carrying a malicious email attachment disguised as a Facebook user agreement. The email reads as follows:

Dear Facebook user,

Due to Facebook policy changes, all Facebook users must submit a new, updated account agreement, regardless of their original account start date.
Accounts that do not submit the updated account agreement by the deadline will have restricted.

Please unzip the attached file and run "agreement.exe" by double-clicking
it.

Thanks,
The Facebook Team

By unzipping and running the attached 'agreement.exe', recipients are actually installing a variant of the Sasfis trojan which attempts to install a backdoor and download additional malware via the Web. The email is spammed randomly, so anyone could receive it and fall victim to the malware whether or not they were a Facebook user.