Duri campaign smuggles malware via HTML and JavaScript