Which of the following attacks is manifested as an embedded HTML image object or JavaScript image tag in an email?