NHS hit with wave of scam emails at height of COVID-19 pandemic