DoubleClickjacking hack turns double-clicks into consideration takeovers

[ad_1] These days, double-clicking on one thing on an internet site with out pondering can set you up for hackers to succeed in your data.

A brand new hacking trick known as "doubleclickjacking" turns your atypical motion right into a sneaky manner for attackers to take management of your account or change your machine settings.

Let’s break it down.

STAY PROTECTED & INFORMED! GET SECURITY ALERTS & EXPERT TECH TIPS — SIGN UP FOR KURT’S THE CYBERGUY REPORT NOW

<source media="(max-width: 767px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/343/192/1-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/686/384/1-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="192" width="343"><source media="(min-width: 768px) and (max-width: 1023px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/672/378/1-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/1344/756/1-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="378" width="672"><source media="(min-width: 1024px) and (max-width: 1279px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/931/523/1-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/1862/1046/1-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="523" width="931"><source media="(min-width: 1280px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/720/405/1-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/1440/810/1-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="405" width="720"> Illustration of a person being scammed. (Kurt "CyberGuy" Knutsson)

What's doubleclickjacking? Doubleclickjacking is a brand new spin on an outdated hacking trick referred to as clickjacking. Usually, clickjacking works by hiding malicious buttons beneath actual ones, so if you suppose you’re clicking one thing innocent, you’re really giving permission for one thing harmful. With doubleclickjacking, it takes issues a step additional. It’s triggered if you double-click, permitting hackers to sneak in an additional, invisible command. Your first click on would possibly do one thing regular. The second click on? That’s the place the harm occurs.

WHAT IS ARTIFICIAL INTELLIGENCE (AI)?

<source media="(max-width: 767px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/343/192/2-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/686/384/2-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="192" width="343"><source media="(min-width: 768px) and (max-width: 1023px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/672/378/2-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/1344/756/2-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="378" width="672"><source media="(min-width: 1024px) and (max-width: 1279px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/931/523/2-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/1862/1046/2-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="523" width="931"><source media="(min-width: 1280px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/720/405/2-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/1440/810/2-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="405" width="720"> An illustration of a hacker at work. (Kurt "CyberGuy" Knutsson)

GET FOX BUSINESS ON THE GO BY CLICKING HERE

Why is it a risk? The scary half is how invisible this trick is. Double-clicking is one thing all of us do robotically, usually with out giving it a second thought. However that easy motion may very well be giving hackers permission to:

Entry your webcam or microphone Change your browser settings Click on "Permit" on a hidden pop-up Share your location Approve a login, fee or perhaps a crypto transaction What makes doubleclickjacking particularly harmful is that the majority web sites weren’t designed to defend in opposition to it. Conventional safety features normally shield in opposition to a single click on, however they usually fail when a second click on is concerned. That small element opens the door for attackers to bypass layers of safety.

This trick doesn’t simply have an effect on web sites, both. It might probably additionally intrude with browser extensions like crypto wallets and VPNs, typically tricking customers into approving actions or turning off safety with out realizing it. On cell units, a easy double-tap can set off the identical impact. To make issues worse, this vulnerability is extra widespread than you would possibly count on. Many well-known web sites haven’t fastened it but. All it takes is one fast double-click within the unsuitable place, and you may unknowingly give away entry to delicate elements of your machine.

MALWARE EXPOSES 3.9 BILLION PASSWORDS IN HUGE CYBERSECURITY THREAT

How does doubleclickjacking work? Right here’s a simplified model of how the trick performs out. A malicious web site quietly masses invisible components behind or over seen ones, like an embedded body, hidden button, or disguised pop-up. In your first click on, the attacker makes use of that motion to reposition these hidden components in order that your subsequent click on lands precisely the place they need it. In your second click on, you unknowingly work together with the hidden content material. You could be clicking "Permit" on a browser permission, authorizing a login, or disabling a setting, with out ever realizing it. As a result of modern browsers are lightning fast , this all occurs in a cut up second. The complete setup and swap are just about invisible to the person. Out of your perspective, it simply looks like a standard double-click.

<source media="(max-width: 767px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/343/192/3-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/686/384/3-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="192" width="343"><source media="(min-width: 768px) and (max-width: 1023px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/672/378/3-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/1344/756/3-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="378" width="672"><source media="(min-width: 1024px) and (max-width: 1279px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/931/523/3-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/1862/1046/3-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="523" width="931"><source media="(min-width: 1280px)" srcset="https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/720/405/3-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1, https://a57.foxnews.com/static.foxnews.com/foxnews.com/content/uploads/2025/04/1440/810/3-new-trick-called-doubleclickjacking-lets-hackers-control-your-account-when-you-double-click.jpg?ve=1&tl=1 2x" height="405" width="720"> Picture of safety characteristic on a pc. (Kurt "CyberGuy" Knutsson)

NEW PHISHING SCAM OUTSMARTS SECURITY CODES TO STEAL YOUR INFO

Find out how to shield your self Doubleclickjacking could be sneaky, however there are easy methods to maintain your self safer on-line. Listed here are some sensible steps you may take proper now:

1. Be cautious about double-clicking on unfamiliar web sites: It'd sound apparent, however most of us click on (and double-click) robotically. If a website prompts you to double-click something, particularly for a login, permission or obtain, ask your self if it’s actually needed. Hackers depend on you appearing shortly with out pondering.

2. Hold your browser up to date: Browsers like Chrome, Edge and Safari commonly launch patches for these vulnerabilities. Which means delaying updates may go away you uncovered to tips like doubleclickjacking. Activate computerized updates if potential, or ensure that to manually sustain with updates so that you’re all the time protected.

3. Use sturdy antivirus software program: Browser-based instruments and extensions can assist block hidden or malicious scripts earlier than they run, however they’re not foolproof. One of the simplest ways to safeguard your self from malicious hyperlinks that set up malware, probably accessing your personal data, is to have sturdy antivirus software program put in on all of your units. This safety also can warn you to phishing emails and ransomware scams, conserving your private data and digital belongings protected. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices .

4. Use sturdy, distinctive passwords for each account: Don’t reuse passwords. If one account will get compromised, hackers can use it to entry your different accounts. A password supervisor helps you create and retailer sturdy passwords effortlessly. Get extra particulars about my best expert-reviewed Password Managers of 2025 here.

5. Restrict pointless permissions: Take management of your privateness by reviewing which web sites have entry to your digital camera, microphone, and placement. Many websites request these permissions by default, even once they don’t want them. Head into your browser’s privateness settings and revoke entry from any website you don’t absolutely belief. For instance, this is a information on how to navigate Google's privacy settings .

6. Keep away from sketchy websites and pop-ups: If an internet site appears to be like outdated, spammy or aggressively pushes you to click on one thing, get out of there. Keep away from downloading random information, and don’t belief pop-ups that declare you’ve gained one thing, must "repair" your machine or "confirm" your login information.

WINDOWS DEFENDER SECURITY CENTER SCAM: HOW TO PROTECT YOUR COMPUTER FROM FAKE POP-UPS

Kurt’s key takeaways Doubleclickjacking is a intelligent new spin on a basic hacking trick that permits cybercriminals to take management over your machine or account, simply from a easy double-click. As a result of this type of assault is almost invisible and works on fashionable browsers, it’s vital to remain alert. All the time be cautious when interacting with unfamiliar web sites, particularly if you happen to're being requested to double-click. Maintaining your browser up to date and limiting pointless permissions can go a good distance in lowering your danger. Most significantly, having the best digital safety instruments in place can assist cease all these threats earlier than they ever attain you.

Have you ever’ve seen odd conduct after double-clicking on a website or had an in depth name with a rip-off? Tell us by writing us at Cyberguy.com/Contact

CLICK HERE TO GET THE FOX NEWS APP

For extra of my tech ideas and safety alerts, subscribe to my free CyberGuy Report E-newsletter by heading to Cyberguy.com/Newsletter

Ask Kurt a question or let us know what stories you'd like us to cover.

Observe Kurt on his social channels:

Solutions to the most-asked CyberGuy questions:

New from Kurt:

Kurt "CyberGuy" Knutsson is an award-winning tech journalist who has a deep love of know-how, gear and devices that make life higher along with his contributions for Fox Information & FOX Enterprise starting mornings on "FOX & Pals." Bought a tech query? Get Kurt’s free CyberGuy E-newsletter, share your voice, a narrative thought or remark at CyberGuy.com.