If you get an XBL message about free Microsoft Points from a friend, be wary.

Friendly warning, folks: There's a new Xbox Live phishing scam making its way across Microsoft's service. The scam comes in the form of a message (shown below) that appears to be from someone on your friends list, which reads "M2AF everybody go to loginxbox.tk I just got 1600 MS points Hurry though!! I think it is a limited time offer."

Free points? Sounds fantastic, right? Too bad that when you actually go to the bogus site and enter your Xbox Live login information, all it does is send the same message to everyone else on your friends list. So if you've already received (or eventually receive) this message, be a pal and tell whoever sent it to you to change their XBL password pronto, as it may be compromised for whatever nefarious deeds these scammers intend.