Dave Marcus, security research and communications manager for McAfee Labs, said that users should be clued in to the scam when it promises to provide an unsolicited Facebook password reset.