The main defence against this is to be extremely cautious when opening e-mail attachments, open them in the sandbox first