Should organizations be overly concerned about image-based spam?