Click hijacking: a pop-up window is prompted to trick users into clicking cookies.

Source: Internet
Author: User

Click hijacking: a pop-up window is prompted to trick users into clicking cookies.

 

 

MalwareBytes experts discovered a "Click hijacking" malicious activity: hackers trick users into clicking a pop-up prompt that appears to be a European Cookie Legal Notice. If the user clicks this pop-up window, hackers can hijack and make profits.

European Law stipulates website cookie Seeding

Cyber Criminals always take advantage of all opportunities to earn profits. During the hijacking, hackers abused the European Cookie law and sent a pop-up notification to initiate a "Click hijacking" malicious activity. European Law stipulates that websites must obtain the explicit consent of users to implant cookies on their computers. In this way, the pop-up window notification is used.

 

Clickjacking Principle

By using iframe frames to place valid ad banners at the top of the window, cyber criminals can gain benefits by clicking the pop-up window. To prevent Internet users from seeing this advertisement, you can simply hide it by setting the iframe frame transparency. This means that every time a netizen clicks a forged pop-up window, they do not realize that they have also clicked malicious ads hidden in the window.

MalwarebytesBlogClaim:

"Behind this malicious activity, cyber criminals cleverly use the pop-up prompts of European laws on cookie usage requirements. In fact, this technology is also called "Click hijacking". Although it is technically simple, it is very effective in generating hidden malicious activities ."

 

Clickjacking Security Risks

According to the message of Malwarebytes, this specific clickjacking activity is not dangerous for website visitors. However, this does not mean that clickjacking is harmless, because cyber criminals can also use the same technology to trick users into clicking malicious links. They can implant malware into the host machine, in this way, the user's computer is infected with viruses or infected with viruses.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.