Clickjacking Campaign εκμεταλλεύεται τον ευρωπαϊκό νόμο περί των Cookies!
Researchers at MalwareBytes discovered a click-jacking campaign that deceives users into clicking on something that appears as a legitimate warning about the European Cookie Law!
Cyber criminals always exploit every possible opportunity to make money, but today's news is about them exploiting this time the legitimate warnings for the European Cookie Law through a clever click jacking campaign.
The click jacking campaign was recently discovered to exploit the pop-up alerts that the European Cookie Law requests to display on the website the user visits.
European websites must obtain explicit consent from users to place a cookie on their computer for commercial purposes, and this request is made by displaying a pop-up notification.
Cyber criminals exploit this pop-up by placing a legitimate ad banner at the top of the message via an iframe. The criminals deceive website visitors by using an invisible ad, which can be done by setting the frame's opacity to zero (or alternatively the transparency to 100).
https://www.secnews.gr/100217/hacker-sentenced-prison/Read more: This is the Hacker with the longest prison sentence... 334 years!
This essentially means that every time users click on the fake pop-up notification they are unaware that they are simultaneously clicking on the hidden ad of the message.
The specific click jacking campaign observed by Malwarebytes researchers is not dangerous for visitors, but cyber criminals could also exploit the same technique to deceive users into clicking malicious links, thereby redirecting their victims to malware-hosting exploit kits.
https://www.secnews.gr/100180/facebook-messenger-soon-get-bots/Read also: Facebook Messenger and its bots... will we see it soon?
