A dangerous phishing email disguised as a Social Security Administration notice tricks users into downloading malware. Here is how to spot the scam.