[int_19h]

JavaScript malware has been a thing for a while now, and antiviruses have been targeting it accordingly.

[gildas]

It's not necessarily a JavaScript malware. A pure HTML page with a <form> tag could suffice to steal credentials.