We are using a browser based email client and the email content is in HTML.

One of my employers told us that if we receive a suspicious email with links, we have to mouse over the link (to check that it is not spoofed) before clicking it. Mousing over triggers an action to display the underlying link in the browsers status bar. But would someone be able to spoof this action and try to do something funny?

This is a similar thread but it discusses thumbnails of attachments and not links in the email.