When the malware runs, it loads a website with a piece of JavaScript. This JavaScript - called preload.js, pulls content from ...