Definition
Clickjacking, also known as a UI redressing attack, is a malicious technique where an attacker tricks a user into clicking on something different from what the user perceives they are clicking on. This is achieved by overlaying invisible or disguised elements on top of legitimate web pages, causing users to inadvertently interact with hidden malicious content. Attackers exploit this by embedding a vulnerable website within an iframe on a malicious site, then overlaying buttons or links that appear harmless but actually trigger actions on the hidden site. Understanding clickjacking is crucial for protecting users from unauthorized actions and maintaining trust in web applications. For instance, a user might think they are closing a pop up but are instead authorizing a fraudulent transaction or granting permissions. Unlike phishing, which relies on deception through content, clickjacking manipulates the user interface itself. This concept is frequently covered in security certifications like CompTIA Security+ and CISSP.