According to Ryan Naraine and Dancho Danchev of ZDNet.com, emails going around ostensibly from Facebook advising of “password reset confirmation” are vehicles for spreading malware.  You should not click on any such emails or attachments.  The only times passwords such as this are changed are if you either change them yourself or you have forgotten your password and requested that it to be sent to you.  Read on. . . .