Spammers have turned to ZIP files to push pump-and-dump scam emails past filters, researchers said this week.