Forget the inbox: Cybercrooks also are turning to traditional mail to spread malware.