Unsubscribing from phishing emails still allows a hacker to collect and confirm email addresses.