Hackers are finding it pays to call ahead before sending malware-laden email.