Multiple variants of malware carried through emails have successfully entered more than eight out of 10 businesses, a new report shows.