A very simple precaution can be to get into the habit of using a meaningful title field, something that you and your respondent would know but a malware bot wouldn't.
"Your pics" doesn't mean anything, but "pics of Jule's wedding in May" does.
It's not foolproof but does make for a good habit with your email correspondees.
