It’s not a virus, Trojan, or a denial of service attack. The latest threat to your browser, computer, and network is click-jacking. Click-jacking is the result of a visit to a malicious web page that allows the attacker to take control of your browser. Specifically, it can force your browser to click on any link it wants.

THE THREAT

According to the latest Wikipedia definition:

“Clickjacking is a malicious technique of tricking web users into revealing confidential information or taking control of their computer while clicking on seemingly innocuous web pages. A vulnerability across a variety of browsers and platforms, a clickjacking takes the form of embedded code or script that can execute without the user's knowledge, such as clicking on a button that appears to perform another function.”

In short, if you visit an unknown or unfriendly website then it could force your browser to click on nasty links that could take you anywhere (including the downloading of a virus or Trojan) or allow the attacker to take control of your computer. And it doesn’t matter which browser you use (Internet Explorer, Firefox, Chrome, Opera, etc.), all the big ones are vulnerable.

Megha Dhawan writes for Indiatimes Infotech and best sums-up the threat:

”So while you might think you are clicking on your bank funds transfer link, or saving a favourite URL link at Digg, or some innocuous Facebook application, the reality could be entirely different, and dark.

An attack can invisibly hover these virtual buttons below the users' mouse, so that when they click on something they visually see, they actually are clicking on something else the attacker wants them to…”

The United States CERT has issued the following warning: "Clickjacking gives an attacker the ability to trick a user into clicking on something only barely or momentarily noticeable. Therefore, if users click on a Web page, they may actually be clicking on content from another page.”

PROTECTION

• Ensue your browser is the most recent version (updated and patched)
• Ensure Adobe Flash plug-in patches are up-to-date (download the latest version)
• Click on the above link and download in each of the browsers you use (e.g. Internet Explorer and Firefox… don’t forget about Chrome or Opera if you use them)

As always, regardless of the threat, you’re likely safe if you stick to only trusted sites and blogs (in other words, visit known sites and stay away from “free” sites that offer song lyrics, photos, clip-art, porn, and especially video.