GM; don't download firmware from email links, and check firmware signatures.

Looks like customer email DB compromised.

(Also got that email)