Manipulated PNG files were used as part of a sophisticated malware attack on energy companies in Central and Southeast Asia.