What is clickjacking ?

Clickjacking, also known as a UI redress attack, is a malicious technique where an attacker tricks web users into clicking on something different from what they perceive. This is typically achieved by overlaying a hidden or transparent interface (often using iframes) over a legitimate webpage. When a user interacts with the visible, seemingly harmless elements, their clicks are actually captured by the invisible malicious layer. This deceptive method can lead to unintended actions such as downloading malware, making unauthorized purchases, or revealing confidential information like usernames, passwords, and credit card details. The term is a combination of "click" and "hijacking," reflecting how a user's intended action is stolen to benefit the attacker. It exploits the visual consistency of web interfaces to compromise security and steal sensitive data.