Yes, that message is really from Facebook. And, yes, it's really malicious.

That's a real post from our friends at KnowBe4 Security.  From the post:

December 6th, 2016 |Categories: Social Engineering, ransomeware, Ransomware, Security, Facebook

Employee Awareness is Ransomware's Greatest Protection

October is National Cyber Security Awareness Month, a great opportunity to strengthen your human firewall in the war against this ransomware epidemic. We love that term, "Human Firewall" - that is [...]