A cyber attack will probably start with an email