Most malware start life as undetected, those who write that malicious code test before they release
You may use this to check suspicious mails >> https://forum.avast.com/index.php?topic=198166.0