A website places an invisible object over something a visitor is likely to click on, such as a link or an image. When the visitor clicks on what they visually see, they are actually being tricked into clicking on a hidden object. To demonstrate the power of Clickjacking, the first demonstration of the attack technique silently activated a computer’s camera and microphone. Scary.
Now go and see how I Know Your Name, and Probably a Whole Lot More (Deanonymization via Likejacking, Followjacking, etc.)