We’re constantly warned not to click on suspicious emails, but simply opening one could be just as damaging.