E-mails are usually sent unencrypted and without a signature, which allows attackers to read and even change them at will. They can then disclose confidential information or distribute false information. Attackers can also install malware this way.