informa
1 MIN READ
Commentary

Clickjacking: New Cyber Attack Has Eyes On You. Literally

Got a Web cam and a microphone? You're just the sort of person the latest thing in cybercrime targeting. It's called clickjacking and it allows the crooks to grab control of your cam and mike, watching you and listening to you, as well as working some scary twists on steering you to malicious sites.
Got a Web cam and a microphone? You're just the sort of person the latest thing in cybercrime targeting. It's called clickjacking and it allows the crooks to grab control of your cam and mike, watching you and listening to you, as well as working some scary twists on steering you to malicious sites.Clickjacking employs a variety of attack tools and uses them in an equally various range of ways.

The cam and microphone ploy, for instance, turns your devices into the crooks' eyes and ears in your workspace. This one comes in via Adobe's Flash Player, exploiting a setting that Adobe has reportedly fixed.

Clickjacking reaches beyond the camera/microphone connection as well, providing dangerously subtle opportunities for users to click on malicious links.

While working on a larger, more formal solution to clickjacking attacks, Adobe recommends this workaround.

Change your Flash Player settings:

1. Access the Global Privacy Settings panel of the Adobe Flash Player Settings Manager at the following URL: http://www.adobe.com/support/documentation/en/flashplayer/help/settings_manager02.html

Editors' Choice
Jai Vijayan, Contributing Writer, Dark Reading
Kelly Jackson Higgins 2, Editor-in-Chief, Dark Reading