https://unit42.paloaltonetworks.com/malicious-javascript-steals-sensitive-data/