FileFix attack tricks users into running image-borne malware