New 'Zombie ZIP' technique lets malware slip past security tools