New malware campaign uses HTML smuggling