Which technique hides a malicious page behind a legitimate page and can cause click events to drop through?

Which technique hides a malicious page behind a legitimate page and can cause click events to drop through?

• A. Click Event Dropping
• B. Complete Transparent Overlay
• C. Hidden Overlay
• D. DNS Rebinding Attack

Answer: (B)

This is about clickjacking, where a malicious page is hidden beneath the visible page the user sees. The attacker uses an overlay that is completely transparent, so the user perceives the legitimate page but is actually interacting with controls stacked on top of or beneath malicious content. Because the overlay is invisible, click events appear to land on the legitimate page, but they end up triggering actions on the attacker’s page. The key detail is the complete transparent overlay, which makes the malicious layer effectively invisible while still receiving or redirecting user input. Other terms aren’t as precise for this scenario. DNS rebinding is a network-related attack that manipulates domain resolution, not a UI overlay trick. The idea of a hidden overlay or generic “click event dropping” doesn’t capture the specific invisibility and layering technique used to hide the malicious page and influence clicks.

This is about clickjacking, where a malicious page is hidden beneath the visible page the user sees. The attacker uses an overlay that is completely transparent, so the user perceives the legitimate page but is actually interacting with controls stacked on top of or beneath malicious content. Because the overlay is invisible, click events appear to land on the legitimate page, but they end up triggering actions on the attacker’s page. The key detail is the complete transparent overlay, which makes the malicious layer effectively invisible while still receiving or redirecting user input.

Other terms aren’t as precise for this scenario. DNS rebinding is a network-related attack that manipulates domain resolution, not a UI overlay trick. The idea of a hidden overlay or generic “click event dropping” doesn’t capture the specific invisibility and layering technique used to hide the malicious page and influence clicks.