With the malicious code embedded into websites, the attacker can then piggyback on the trust level of the website and launch a variety of attacks.