When the page loaded favicon image, the simple scripts that were earlier added to the site would load the image's embedded skimmer scripts. These scripts then sent back to cyber crooks any credit ...