Over 20% of all HTML email attachments scanned over the past month were malicious: Report