The Strange Case of the Malicious Favicon