Later archive addition

All Your Clicks Belong to Me: Investigating Click Interception on the Web

Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee and Xinyu Xing

OBSERVER instruments Chromium to detect third-party scripts that rewrite links, attach click handlers, mimic first-party content, or place transparent overlays over it. A crawl of the Alexa top 250,000 found 437 scripts intercepting clicks on 613 sites, often for ad monetization and sometimes redirecting users to scamware or drive-by downloads.

Record

Researcher

Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee and Xinyu Xing

In the archive

• Added to the 2019 archive after the original list was published

Related sources

• Talk recording

Tags

• ui-redress
• clickjacking
• javascript
• browser-automation
• measurement-study
• abuse-of-functionality
• malware
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee and Xinyu Xing, first published at the original source. Preserved copies are kept so the citation survives its host.