I could find is in this shadowserver post: http://blog.shadowserver.org/2012/04/16/beware-of-what-youdownload-recent-purported-ceiec-document-dump-booby-trapped/ related to exploit documents identified