Clickjacking

Clickjacking is a UI redress attack that tricks users into clicking hidden or disguised interface elements by overlaying a transparent iframe on top of a legitimate page. Attackers exploit this to capture clicks intended for the victim page — triggering unintended actions like enabling a webcam, making purchases, or liking social media content.

Prevention relies on X-Frame-Options or CSP frame-ancestors response headers.