New password-stealing virus targets Facebook