NEW DOUBLECLICKJACKING ATTACK EXPLOITS DOUBLE-CLICKS TO HIJACK ACCOUNTS

Summary from the TLDR InfoSec newsletter

Clickjacking attacks are when an attacker utilizes an iframe to trick a user into clicking on content from a legitimate page that an attacker is hiding from the user and is largely prevented by modern browser defenses. A security researcher has introduced a new technique called DoubleClickjacking where the attacker launches a new window that covers the original page and prompts the user to double click to solve a captcha or the like. The page will then listen for the first click and close itself while having the parent navigate to the target site and capture the second click, bypassing browser defenses.