This morning I read an email which sounded like a new (to me) spam/malware vector: My husband died, here's his death certificate (attached PDF), please deactivate his account.

No, it wasn't any of that. The deceased did have a FreshPorts account, now inactive. :/