Clickjacking

Clickjacking↗ is a technique where an attacker overlays an invisible, malicious element on top of what looks like a normal, trustworthy button or link, tricking the victim into clicking something entirely different from what they think they're clicking.

A user might believe they're clicking \"play video\" while actually clicking a hidden \"authorize\" button on a different site layered underneath. Modern browsers and website headers that prevent a page from being embedded in a hidden frame are the primary defense.