Exploiting Clickjacking to Steal Login Data from Social Media Platforms
Achmad Firly Henry Egitha, Yunianita Rahmawati · JICTE (Journal of Information and Computer Technology Education) · 2023
This research focuses on designing modified clickjacking links to investigate the phenomenon of clickjacking attacks aimed at obtaining user information from WhatsApp and Instagram. It aims to both implement these attacks and assess their effectiveness in gathering data on victims. Using fake clickjacking links as a conduit, the study successfully retrieves login credentials from WhatsApp and Instagram, highlighting common defense methods against such attacks and identifying modified websites vulnerable to clickjacking techniques. The study concludes by emphasizing the need for user education, particularly on social media platforms, and proactive measures to mitigate the impact of clickjacking incidents. Highlights: Clickjacking uses hidden elements to trick users into clicking unintended actions. Phishing sites mimic legitimate platforms to steal user credentials. Effective defenses include X-Frame-Options, CSP, and user education. Keywords: Attack, Link, Hacking, Security, Protection