Researchers are warning malware payloads can bypass traditional AV protection when delivered buried inside images, documents or even just a pixel.