Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: FIN6 has used malicious JavaScript to steal payment card data from e-commerce sites.