Kobold letters: HTML emails are a risk