New Clickjack Attacks: Where You Double-Click Matters

Call them sneaky, devious, underhanded, cunning, and conniving. Clickjack attacks are all that and more. And now there’s a new twist on this highly successful cybercrime. All it takes is one wrong double-click that puts this crime into motion, leaving countless victims unaware they’ve been duped. That is, until it’s too late. Here’s what you need to know now about this new type of attack on your clicks.

2

Most of us visiting trusted websites would never imagine a quick double-click meant our personal accounts and PII could be hijacked. Earlier clickjack attacks required just a single click, but once they were figured out, they had to resort to new tricks. This new double-click version gets past clickjacking protections put on the single click attacks. But it still incorporates one-click tricks that undermine device security settings, allow money transfers, deletes accounts, and more. But with this new double-click attack, there’s more to it.

This latest clickjack attack uses what looks to be a safe element on a trusted webpage. Little do we know hackers placed a disguised or hidden element behind what we click on. A favorite tool—CAPTCHA authentication boxes. Two clicks are all it takes for this trick to install malware, take us to malicious web pages that steal our PII, wreak financial havoc, and more.

2

• You have to wonder if it’s safe to click on anything at all. You might be right if it weren’t for the safety tips below that fight this latest threat of clickjack attacks. And remember, don’t let hackers win!

• Always click carefully. Whether it’s a malicious email or text link, something for free or sounding too good to be true, the web is full of bad guys luring us into acting.

• Make sure the sites you visit are legitimate and always carefully check the URL to verify it’s spelled correctly. Keep a close eye out for transposed letters and numbers in places of letters.

• Never double-click on what we know as “CAPTCHA” boxes. They are using these for many of these types of attacks.

• Using anti-virus solutions on a device is always recommended. Keep it updated at all times.
• Remember, a good dose of common sense is your best weapon, so don’t be afraid to use it.