DoubleClickjacking – New “Double-Click” Attack to Hack Websites & Take over Accounts

DoubleClickjacking is a newly described web attack that leverages the timing difference between mouse events (mousedown vs. mouseup) and window/opener manipulation to swap in sensitive pages (such as OAuth authorization dialogs) during a two-click sequence, allowing attackers to trick users into authorizing malicious actions; the report details the technique, affected platforms (e.g., Salesforce, Slack, Shopify, browser extensions), demonstrated vulnerabilities, and recommended client-side and browser-level mitigations.