Collected research

All Your Clicks Belong to Me: Investigating Click Interception on the Web

Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee and Xinyu Xing · usenix.org

A measurement study of how third-party scripts steal user clicks. An instrumented browser framework called Observer analysed the Alexa top 250K sites and identified three interception techniques, finding 437 scripts that intercepted clicks on 613 sites. Most diverted clicks into advertising revenue and some delivered scamware.

Record

Researcher

Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee and Xinyu Xing

Published by

usenix.org

Topic

Other

In the archive

• Collected in the 2019 research round

Related sources

• USENIX Security '19 - All Your Clicks Belong to Me: Investigating Click Interception on the Web

Tags

• clickjacking
• ui-redress
• measurement-study
• large-scale-scan
• javascript
• iframe
• dom
• supply-chain
• owasp-a04-2021
• owasp-a06-2021

This page is the archive's own catalogue record. The research is the work of Mingxue Zhang, Wei Meng, Sangho Lee, Byoungyoung Lee and Xinyu Xing, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.