According to official figures, the Treasury has been hit with 4,870,389 ‘malicious emails’ over the last three years