Hackers hide web skimmer behind a website\'s favicon