Question

Briefly answer the following questions:

1. In your own words, briefly describe what clickjacking is and how it works. Also provide an example of one type of attack.

2. How would you know you are a victim of clickjacking? How can you protect yourself from future clickjacking attacks?

3. If you were at this conference, come up with a unique question that you would ask the presenter. Just provide the question. You don’t need to speculate on the answer.

4. Do you think clickjacking attacks will ever be stopped? Are they completely stoppable? Why or Why not?

Answer 1

Question 1:

HTML is widely used in creating web page. When you see a web page you can see many layers in it such as advertisements and pop-ups. This concept of multiple layer is done by a html tag called iframe . Web page developers use this tag to create web pages which are embedded within another web page. Hackers exploit this functionality of iframe tag to create opaque or transparent websites. This method is called clickjacking.

Now lets see how its done.Suppose you have visited a web page. There you may see prompt or ads or buttons showing you have won prices or you're a lucky winner etc. When you click this type of button you're in danger , as the functionality of this button maybe to download some malicious virus or fowward to some fake phising website.This is because you're actually clicking an overlay not an actual button. This is how clickjacking is done.

One type of clickjacking is liejacking. The attack in which an attacker collected likes for his own post using the Clickjacking method was later known as 'LikeHijacking'.

Question 2:

There are many ways to know you're being clickjacked. First if you click on buttons which link to other websites which displays some game to win prizes or some jackpot question answer, this you're currently being clickjacked. There are other forms of clickjacking such as Likjacking in which you're unintentionally made to like a facebook page which you didn't want to. If you find this type of occurence you're being victimized into clickjacking.

Some measures to prevent clickjacking:

a) First of all don't be enticed by ads or popups that claims things like "you've won a jackpot" or "you have won an IPhone" this type of things are you're first warning signs that you're being trapped .

b.) Use internet security and keep them updated to prevent malicious software's or sites from being loaded or downloaded.

c.) Use popular and safe browsers while surfing. As they have enabled addOn such as NoScript , X-Frame etc. that prevents clickjacking.

Question-3

Does the web page take any responsibility if a person is victimized in Clickjacking.?? or What are the latest browser add-ons in the market that are being used to prevent Clickjacking. You can ask these questions in a conference.

Question -4

Clickjacking can't be completely stopped bacause humans are easily enticed by offers and gifts.The greed for easy availablilty of gifts and offers have made them vunerable. Many people don't know , especially the people that are not very used to computers .Though with upcoming technologies and updated and more secure browsers Clickjacking has surely been prevented alot. But still the hackers come up with ways to break through the security framework of browsers and are able to Clickjack.

Hope you find the answer worthy. For any queries please ask me in the comment section.