Websense has detected a new malicious spam campaign masquerading as official emails sent by Facebook.