XSS payload designed to steal LastPass users' credentials