Customers of 123-reg, the UK’s largest web domain name registrar, have received phoney emails with a malware-laden ‘invoice’ attached.