Fake Salesforce.com malware spam email
22.10.14
Edit
Fake Salesforce.com malware spam email claims your SSL certificate has expired and a new one is attached.
Attached zip contains an exe virus or trojan horse.
Spoofs salesforce.com in From headers.
Subject: October 17, 2014 SalesForce Security Update
Dear client,
You are receiving this notification because your Salesforce SSL certificate has expired.
In order to continue using Salesforce.com, you are required to update your digital certificate.
Download the attached certificate. Update will be automatically installed by double click.
According to our Terms and Conditions, failing to renew the SSL certificate will result in account suspension or cancelation:
http://www.salesforce.com/company/privacy/security.jsp
Thank you for using Salesforce.com
cert_update.zip (88)