Researchers at FireEye have spotted a malware campaign using Google Docs to redirect victims and evade callback detection mechanisms.