CLASSIC CLICKJACKING

IFRAME · UI REDRESSING

Victim page embedded in invisible iframe. Decoy UI ("Win a Prize") aligns with hidden "Confirm Transfer" button. User click passes through to iframe — funds transferred.

[ CLICK THE PRIZE BUTTON ]

🎉 Congratulations!

You've been selected for a $500 gift card

CLAIM YOUR PRIZE

[*] Click the white "CLAIM YOUR PRIZE" button area...