Malicious emails with macro-enabled Word documents are spreading a never-before-seen remote-access Trojan, researchers say.