a single click on a phishing email or malicious attachment may be all cybercriminals need to get what they want