The operator behind OpenSUpdater is using a new way to sneak adware and other malware past security tools.