A new strain of malware identified by security firm Sophos as Troj/Agent-XNN has been circulating the social networking site, encouraging members to view photos as an attachment. After clicking on the infected link — which is disguised as a Facebook notification email — a ZIP file containing malware allows hackers to gain control over Windows-operated computers.

Although Facebook email notifications typically tell you which friends tagged you in a picture, this malware campaign states “one of your friends added a new photo with you to the album.”

MORE:  Watch Out for This Sneaky Facebook Scam Disguised as a Photo Notification.