"When a user views an e-mail message containing a malicious ICS entry, its embedded JavaScript executes via an ontoggle event ...