I use the simplest solution. I delete them all, and only ever click on expected attachments from known senders. Even some mail from the known senders is deleted.
As a friend of mine says, "If it is important, they can always call you". The UK to NZ call charge from the discounters is only 1p/min.