Phising email with no visible content

In theory it could be done if: a) yor email client can execute javaScript b) JavaScript is enebled and there's no confirmation on ruing scripts from email c) Yor email client "supports a macro language" (VB for applications for example) and security for those "applications" or macros are not set propperly.

So it will depend on your mail clien.