The JavaScript payload used to replace the original script of compromised websites     The delivered script is almost the same as the malicious script previously discussed in the section on the watering hole attack.