Customers of Salesforce.com are facing a barrage of phishing emails containing viruses and keyloggers after the company suffered the leak of a customer contact list.