Year-long Russian attacks infect users as soon as they look at an email