New attack tactic sidesteps Windows security software