. . . "For example, a hacker could add a form to a page that looks legitimate asking for credit card information or other data." .