Twitter, LinkedIn

FreshBooks

Clickjacking: A Serious Threat

I spend more time than I care to these days helping people recover control of their computer from trojans and viruses.  It has become almost impossible to know whether a website is safe from Malware or not.  Part of the reason for that is a concept called Clickjacking.  Here’s an excerpt from a good article on the subject.

The clickjacking concept is nothing new, but the threat that Grossman and Hansen discovered is. It spans multiple browser families and doesn’t even require that a user click on anything. Just loading a compromised page sets off the attack, and clicking on that page will likely make things worse for the victim, they say. “And whether JavaScript is on or off, it will affect you,” he says.

The attacker can slide any malware underneath the mouse such that the user has no idea he or she is in the danger zone. So . . . → Read More: Clickjacking: A Serious Threat