-
"Cheers, The Zephyrfalcon.org team"
Some of my customers got those kind of mails. They're damn official looking too. If I wasn't the "crestsource.com" team myself, I'd probably have opened it.
Also some are encrypting the .zip with a random password which they include in the mail. Presumably this is a cheap form of polymorphism, trying to stop them getting caught by filters so quickly.
The arms race is certainly heating up!