A cunning ZIP file trick lets malware masquerade as harmless data, evading detection and raising alarms across the cybersecurity world.