Targeted email scams are getting bolder and more convincing. Here's how they work, and the smartest ways to defend yourself.