https://www.securitynewspaper.com/2016/01/25/javascript-backdoor/