Touted as a Heartbleed removal tool, TrendMicro is warning that it is a phishing campaign and the "tool" is actually malicious software.

Heartbleed was not a problem for individuals; it required a fix that contained a server-side patch. Users only needed to change their passwords on Web services that were affected.

Trend Micro’s Gary Davis wrote that the email comes with an attachment the contains the "tool". The tool is actually a keylogger, which records keystrokes and sends the content to the attackers.

The emails have a subject line “Looking for Investment Opportunities from Syria.” The email goes on to suggest the victim run the tool to remove the Heartbleed infection.