houseaccount 0.8.1
obfuscated JS, credential access
“One stylesheet and one script, served by the engine or from design.houseaccount.com, the marks every app is known by, the pages shown when…”
Built bundle ends with a remote script injectorCalls an object's open() method
SHA-25678ce1451776657739a92c02589e799f515b0eb3324e295f18f2681157ab53970