- [Instructor] Clickjacking involves multiple transparent
or opaque layers in order to induce a user
to basically click on a web button or link
on a page that the user was not intended
to navigate or click.
Clickjacking attacks are often referred to
as UI redress attacks.
Basically, user keystrokes can also be hijacked
using clickjacking techniques.
An attacker can launch a clickjacking attack
by using a combination of CSS style sheets
or i-frames or text boxes to fool the user
into entering information or to click
on a malicious link that may be
actually an invisible frame
that then can be rendered from a site
that the attacker created.
Now the OWASP organization has a clickjacking
defense cheat sheet that provides many different details
about how to defend against clickjacking attacks.