https://blog.nviso.eu/2024/10/02/all-that-javascript-for-spear-phishing/