It's not an attack vector. It's a theoretical way of hiding data that cannot be itself used to attack anything, because malware needs to run to do anything, and to do that it needs to exist in data areas visible to the host, not hidden areas that aren't.