[rwth-security] Web skimmer hides within EXIF metadata, exfiltrates credit cards via image files