Hackers are spear phishing for a big catch. Here’s how to dodge their malware-tipped spears