Prometheus: Analyzing WebInject-based information stealers