Stay Secure From Javascript Trojans, My Friends

from here

Inspired by an actual email, with actual HTML content, which virustotal actually recognized as malware.