Have you ever noticed in social media when a friend suddenly likes a video/page/article but this choice does not make sense with her basic personality or behavior?


A good example would be when your cousin living in Sokoto suddenly likes many articles about fashion week in Lagos. This may lead to two conclusions: She is now into fashion and wants to be the next supermodel or she might be a victim of Click-jacking and probably never noticed what happened.
However, Click-jacking is not just about fashion week in Lagos.

Most examples of Click-jacking are embarrassing, click-bait, or even sex related. Click-jacking is the technique for tricking web users into clicking on something different from what they think they are clicking on. Technically, it is also called a user interface redress attack.


How does Click-jacking work?

Is it a malware file that hides on my computer and clicks on “like” when I am not watching? Could it be? This time, not really. In this particular version, the bad guys have “infected” web pages that run specific java scripts that will use the running Facebook session in order to generate “like”/”share” unnoticed posts/pages.

The way it works is quite simple. It will count as a “like” when the user just moves the mouse over a hidden field (not even clicking on it).
Nevertheless, you do not need to worry about these extra likes UI redress attack

In addition, here are some extra tips and suggestions to completely avoid these kinds of infections:

. Use a good antivirus that has internet security features e.g Avira, It checks for those scripts and detects them as “HTML/Infected. WebPage. Gen2”.

. Log out from social media (Facebook, Instagram..) when you are not active

. Check your activity log for unusual activity

. Stay sharp and aware

. Control JavaScript (have a No-Script add-on in your browser)

http://www.fastbundle.com/2017/04/how-to-prevent-clickjacking.html