Next-generation clickjacking attack revealed
A computer security researcher has released a new browser-based tool that can be used to experiment with next-generation 'clickjacking' attacks along with details of the four new techniques.
Clickjacking is a style of attack where a user is tricked into clicking on certain parts of a web page with hidden buttons that perform malicious actions. The hidden buttons are delivered by an invisible iframe, which is a window that brings other content into the target website.
Clickjacking become well-known in 2008 after researchers Robert Hansen and Jeremiah Grossman discovered a kind of attack involving Adobe Systems' Flash application that could give remote access to a victim's Web camera and microphone.
