A new phishing attack is underway against Facebook users. TechCrunch details the attack, which begins with an email to your inbox that looks like the standard notification of a message from a Facebook friend:
The message body will apparently read something like this (with YOURFRIEND being replaced by the name of a friend of yours):
YOURFRIEND sent you a message.
Subject: Hello
"Visit http://www.facebook.com/l/4253f;http://fbaction.net/"
Twitter and Google Trends have already lit up with terms related to the attack as well. A Facebook spokesperson said in an emailed statement, "We are aware of this phishing domain and have already begun to take action." For now, watch out for the fbaction.net domain.