I would say the biggest concern here is the attachments--definitely do not open them. Giving you a virus is the most likely goal.

They could also attempt to get some info on your firm once they become a "client," so yeah, I'd say don't open, don't respond, increase the security level on your spam filter if possible. Sorry you're dealing with that.