clickjacking
Invisible overlay attack
Clickjacking is a web attack that tricks users into clicking something different from what they perceive.
A malicious site overlays invisible elements on legitimate-looking buttons, so clicking "Play Video" might actually authorize a purchase or change account settings.
The technique hijacks clicks, redirecting them to hidden targets: The site used clickjacking to harvest Facebook likes.
Nested browsing context
- opacityImpermeability to light
- redirectionChange of course
- layeringForming successive strata
- visual deceptionTrick of the eye
Harmful code in ads
- credential theftUnauthorized acquisition of authentication data
- unauthorized actionConduct lacking proper approval
- social engineeringManipulating people for information
- drive-by downloadAutomatic malware from browsing
Lure for prey
- trickeryDeliberate deception or fraud
- ruseDeliberate act of deception
- decoyFalse target for misdirection
- subterfugeDeliberate deception to conceal
lure · mislead · disguise · masquerade · spoof · camouflage · concealment · manipulation
iframe
Nested browsing context
- opacityImpermeability to light
- redirectionChange of course
- layeringForming successive strata
malvertising
Harmful code in ads
- credential theftUnauthorized acquisition of authentication data
- unauthorized actionConduct lacking proper approval
- social engineeringManipulating people for information
bait
Lure for prey
- trickeryDeliberate deception or fraud
- ruseDeliberate act of deception
- decoyFalse target for misdirection
subterfuge · lure · mislead · disguise · masquerade · spoof · camouflage · concealment · manipulation · false pretense
mitigation
Reduction of severity
- security patchesSoftware updates fixing vulnerabilities
click, clicking, hijacking, phishing, smishing, double-click, right-click, left-click