McAfee: Facebook phishing attack targets passwords