https://blog.jscrambler.com/defcon-skimming-a-new-batch-of-web-skimming-attacks/