BazarBackdoor sneaks in through nested RAR and ZIP archives