You've heard of "clickjacking", now meet "keyjacking"

An Italian security researcher has rediscovered a trick known as user interface redressing.
He's used the concept to detail some potentially risky behaviour in Internet Explorer 8 on Windows 7.

http://nakedsecurity.sophos.com/2013/06/29/anatomy-of-a-browser-trick-youve-heard-of-clickjacking-now-meet-keyjacking/
Keyjacking
You may remember clickjacking, where your cursor is placed over a clickable button, such as a Facebook Like, that is itself placed over an innocent-looking image. Then the button is made transparent, so that the image "re-dresses" the button and you think you are clicking on the image.
Valotta's trick is keyjacking, which is like clickjacking but with the re-dressing done the other way around.

Meet keyjacking | Naked Security

No comments:

Post a Comment