New facebook phishing email

I've had this one twice in the the last few days:

Dear user of facebook,

Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
Your Facebook.

It comes with an attached document called "facebook_", and the "to" field is, somehow, someone else's email. I'm guessing it's a virus and it shouldn't be opened.

Be careful out there.