Clickjacking

Watch
Think
Explore
Links
Discuss

Watch

OpenClose

Watch

Video credit: What is Clickjacking – posted by Keeper Security on YouTube

Think

OpenClose

Think

Which of these is a possible consequence of clickjacking?
- Liking something you don’t like.
- Sending out spam.
- Modifying your computer.
- All of the above.
This is one of the more likely results of being clickjacked (on Facebook). This is not the same process as ‘like to unlock’, where a marketer will hold back content until you’ve intentionally liked their page.For practical tips on how to avoid, and deal with clickjacking, visit Facebook’s help page.
This is true both on Facebook and in the wider web – although Facebook has become safer as of late. If your email is compromised, be prepared for a lengthy process of recovery or replacement. To prevent clickjacking, check out these tips.
This is an unlikely but serious consequence that would require a user to take several steps and override security measures; while it’s possible, you probably don’t have to worry about it. To learn more about the most common consequences of clickjacking, visit the CBC’s article on social media hazards.
Right! Click the answers above for detailed information.
Do you think clickjacking can affect your online identity?
- Not as far as I can tell.
- Yes, but only nominally.
- Yes, and the effect is dramatic.
Have you ever seen another user post something that seems a little out of place? This may have been a result of a clickjack attack, and there are definitely implications for the identity of compromised users. For tips on maintaining a professional online profile, visit Digital Tattoo’s Overexposed work feature.
This is usually the case. Social media-literate users will often recognize and forgive a friend who’s fallen victim to a clickjack attack. Repeated instances, however, may have more of an effect. For tips on maintaining a professional online profile, visit Digital Tattoo’s Overexposed work feature.
This is not always true. While game invites and such are irritating, it generally takes more than one instance to seriously damage your online reputation – unless the attack is particularly severe or damages another user. For tips on maintaining a professional online profile, visit Digital Tattoo’s Overexposed work feature.
How does a clickjack attack take place?
- An attacker takes over mouse input.
- The user clicks an invisible overlay.
- The button clicked is a fake.
It sounds that way – but a fundamental aspect of clickjacking is user involvement. The user has to make the choice to click for a clickjack to occur – hence the importance of awareness. To find out more about the intricacies of clickjacking, visit this article by marketingland.com!
Right! It may seem like the button is fake or that an attacker takes over your mouse – but what’s really happening is more subtle. Think of an invisible ‘framework’ over top of a button (that may or may not be real) and you’ll have an idea of how it works. These frameworks can be removed using Noscript (for example).
While this may or may not be the case, it’s not the source of the attack itself. To find out more about the intricacies of clickjacking, visit this article by marketingland.com!

Explore

OpenClose

Explore

Clickjacking, also known as “click hijacking,” “click baiting,” or “UI redressing” is more common than you might think. When clickjacked, you are tricked into clicking an ‘invisible button,’ causing you to unintentionally endorse a product, follow a Twitter account, send spam, or something more malicious. This can also give a false impression of who you are online. There are other, more serious types of clickjack as well, which could give hackers access to your confidential information; watch our video to learn more.

To protect yourself against clickjacking, make sure your browser is up to date – older versions are not as secure and are more vulnerable to clickjacking attacks. Downloadable clickjacking detection/prevention software is available (such as NoScript).

Have you ever been the victim of clickjacking? Maybe your Facebook page reports that you like pages that you don’t recall having seen before, or perhaps you’re unintentionally inviting your friends to watch videos and play games over Instagram. These are common examples of clickjacking.

But clickjacking can be much more malicious than simple misrepresentation. Text fields can be carefully overlaid to record your password on websites designed to look authentic.

You can avoid misrepresentation and worse by being aware of the following:

Authentic websites use https in the address bar and won’t use clickjacking.
Be wary of content that takes you away from your social media network.
Use an adblocker to cut down on the ads you see online, which could be clickjacking vehicles.
Keep your browser up to date

Links

OpenClose

Discuss

The Digital Tattoo Project encourages critical discussion on topics surrounding digital citizenship and online identity. There are no correct answers and every person will view these topics from a different perspective. Be sure to complete the previous sections before answering the questions.

Have you ever fallen victim to a clickjacking? If so – what happened?
Do you think that clickjacking can impact your digital footprint?

What do you think? Tell us using the comment below.

Phone
This field is for validation purposes and should be left unchanged.
Was this helpful?*
- Yes!
- No!
Why not?*
Why?*
CAPTCHA

Content maintained by The Digital Tattoo Team

Clickjacking

Watch

Think

Explore

Links

Discuss

Leave a Reply Click here to cancel reply.