Home > Browsers security > Beware from clickjackers

Beware from clickjackers

October 8th, 2008

clickjacking lets hackers and scammers hide malicious stuff under the cover of the content on a legitimate site. You know what happens when a car-jacker takes a car? Well, click-jacking is like that, except that click is the car. Clickjacking trace back to 1990 and now it is being used again by hackers.

Mostly the hacker use buttons links or small banners on which the user show trust to click but the behind script working on that banner or button retrieve your personal information. Let suppose the hacker put a button of BBC but when someone click to that button, the script behind the button will start functioning and the desire goal of the hacker achieved. In latest clickjacing the hacker is so smart that when the button is cliked the script work and then it redirect you to the destination page where you intend to go, even you dont suspect any thing fishy.

Clickjacking is a serious, potentially long-term problem for browser developers. Since the attack is enabled by a feature within HTML, it demands changes to the HTML specification.

Web standards groups are currently working on HTML 5, a specification that will incorporate new features into the programming language to accommodate future web design. But the standards process moves slowly, and changes to HTML could break existing web pages.

Almost all the browsers are updated smartly against clickjacking but precautionly one can do the simple test by looking at the link of the suspicious button or text. It is very simple just right click on the image or button and see the properties, in property popup see the link destination, if it goes to right destination then perform the action otherwise leave it as it is.



Computer security Browsers security , ,

  1. No comments yet.
  1. No trackbacks yet.