If this happens to you, what you want to do is immediately close your browser, you will not be able to get your clipboard back until you restart the browser windows. Some have reported having to reboot to free the clipboard. Do NOT click on any thing on the page it redirects you to, just close the browser or do control alt delete to go to task manager and in the running processes kill the one for your browser (end task) that will stop that current session on your browser.

many bank sites are putting up warnings about this exploit on their websites to alert and inform people.

Using no-script does take some learning curve and it will take a while for you to "teach" it what you want to allow or not allow. Read the directions on the link I posted above.

Another very good recommended program to add to your arsenal is Win Patrol 2008. Here in Corrine's blog she explains how it can help with this problem, but it has many good features you should look at.
Announcing WinPatrol 2008 With ActiveX Control

looks like the pic in the above post got deleted so here is the smaller version.

Grossman confirmed that the latest versions of Internet Explorer (including version 8) and Firefox 3 are affected.

Do you think that this means that versions of Firefox under version 3 are not affected?

Raven I have read all the articles you posted, and tried hard to understand but afraid its all way over my computer skills, what should someone like me do? get a computer tech to come here and do something with the "script" or "adobe"
am just about afraid to touch the computer now.

Jeremiah Grossman and Robert "RSnake" Hansen. just who are these people?

Where has this been seen hitting around the net?

"If this happens to you, what you want to do is immediately" If what happens if something is going funny with the pc how on earth do you know it's a result of CLICKJACKING

it will redirect you and will take you to one of the sites that is auto installing the various versions of antivirus xp 2008/2009 or what ever they happen to be naming them, which are carrying many types of infections with it. This has gotten so prevalent now that the bad guys have discovered this method of taking over websites that everyone is trying to put out warnings to the community to try to make people aware if they see this suddenly happening to them NOT to click on any of the redirected pages, Not to buy any of the fake programs, but instead to immediately close out all instances of the browser, in some cases that will flush the urls out of the clipboard but not always in some it takes a reboot of the pc to clear the urls from the clipboard from what I have read.

The best thing you can do is be very careful where you surf and where you click. If you use firefox you can use the no script add-on set as shown.

The forums have been seeing many many cases of these exploits and several got them from very legit websites that had been hacked and a redirect put on the site.

gillian don't panic about it but it is something we all need to be very aware of since it has been so on the increase.
Hopefully adobe and the browsers can get some method out to help with this soon. It is better to be aware of this kind of thing so we know to come for help asap if we know we have been exposed to one of the redirects. If you see anything pop up saying it is scanning your pc and that you have infections or anything like that do NOT click anywhere on the page, close the browser or just go to start and reboot it.
From what I have read the earlier versions of firefox are also affected.

Also it is a good idea to go to your pc to your adobe and check for updates. You can also use the secunia inspector to see if it shows you have out of date programs. Updates should hopefully come out soon.
The Secunia Online Software Inspector

I just wanted to post so y'all would be aware of this stuff, don't freak out, just be alert. Always better to be prepared and educated than caught off guard.

"The forums have been seeing . . ."

Which forums please?

I have seen it mentioned on at least 3 of the security forums including IT,Broadband and ComputerCops and those are not Chicken Little forums most of the folks there are all professionals involved deeply in IT and Security depts. Trust me the NoScript extension for Firefox is a really good bet for people right about now.

one of the links in the original post was to the ubuntu forum where a person was there because he was having the copy and paste issue.

The ones the forums are seeing are the i frame related redirects.

As to what all this version will involve we don't know yet as it says in the main article they are not disclosing it all to the public yet to allow the vendors to try to create patches. But the re-directs using the i frames is very real and has been happening since the beginning of August and getting more prevalent. Using the no script with the i frames blocked will help with those.

We will all have to wait and see what the new versions bring us when they do go ahead and announce the full disclosure. I have no idea.

Which forums have seen the i frame redirects I have been talking about that infect with the antivirus xp? BBR, Landzdown, Computer Cops, Aumha, if they are support forums with a cleaning team they have seen them.

There are several threads on BBR where some of the smart folks there have gone into the page source code and posted the code that was causing the redirect.

One in specific was a girl that went to a site to buy a mop a legit site, there was an i frame take over on that page that with out her doing a thing started the antivirus xp pop ups.

These are bad right now, but the stuff they are discussing in the articles that has not been fully released sound even worse, for those we will have to wait and find out.

here is the link to one of the ones I mentioned over on BBR, if you follow it through Kayrac shows the i frame info.
Trojan and spyware from Yahoo search

The other thing I do not understand about the article is this statement" A requirement for the exploit is DHTML, does anyone still use it? DHTML is a TERM describing the art of making dynamic and interactive web pages. I would think mostly Java is used now.. and do we have to be on one of those sites to be a victim? So we will have to wait untill more is revealed I guess.

There has indeed been much discussion on this topic at all the security and internet news sites for the past week or so....

Not to worry though........

1) The Browser: don't use IE, FF, or Safari
2) run a user friendly Linux distro such as Mepis,
PCLinuxOS, LinuxMint, etc......
3) Install to your system your taxpayer funded
NationalSecurityAgency ( yes the super secret USA spy
agency) "SecurityEnhancedLinux" package

If you run Linux, and you NEVER EVER log in and stay on as "root", you will apparently never have any need to be concerned with such things anyway......I have had PC's that have been online running (as much as, not always) 4 browsers 23 windows and 123 tabs simultaneously for over 8 continuous months with never an issue....never a reboot(except when installing kernel level OS updates), never a defrag, never any sort of "infection", never an anything
And other than the NSA SEL software, I run absolutely zero "security" software of any kind, ever....well there is that outgoing firewall, something IMHO everyone should have anyway.............
If you are a diehard MSWin fanBoi/Girl, run a dual-boot system, and use MSWindows for everything except that which requires some measure (like any) of security concern or effort, ie: internet/online/networked stuff, send and save everything you want and need and do as mail items, you know, save all your stuff online and you're pretty much infect worry free....
Oh yeah....all at a cost (including updates/upgrades) that is less than $0.01

Just my experience based opinion. Yours may (and I assume will) differ.

Have a great day..........
and now back to our rainy day afternoon.........

Oh yeah.....
If you run an MSWin-OS, MAKE CERTAIN that after you sign in/on to any site that you have data/info you wish to remain secure, like mail, CC numbers, banking, investment, etc.....
Make certain that you go into your history and cache and cookies and delete any and all references/URLs/pointers/links etc to all of those kind of sites

Like Gillian, I'm confused and concerned. I did get the noscript add-on for Firefox - but the learning curve is too steep for me now and it's just slowing me down and not allowing me to go to numerous sites I had bookmarked and want to return to. (One example is that I'm on a never-ending quest to find a dining room chandelier or pendant. I've been all over the internet and bookmarking lights I might like - that I'd like to consider. I want to quickly go back through them all and come up with a smaller list to consider and show a designer. I'm not even sure of the number of bookmarks I made, but it's well over 50 - maybe over 100.)

I'm tempted to just uninstall the noscript add-on. Is that okay - or are these bookmarked sites just the kind of place I should be avoiding with this clickjacking going on?

I'm also not sure if I can be clickjacked if I don't see a statement that I'm being redirected - or a prompt to click a link somewhere? Could you explain some more what I would have to do (or not do) to be careful where I surf and click? It seems to me that on my recent searches for lamps (and music), I am going places I don't know. What cautions should I take.

Thanks.
Lynn.

I am not quite sure how to respond to this thread. Yes, all the information on clickjacking is real. However, this is a computer help forum for gardeners and non nerdy computer users. There has to be thought put into any warnings, a couple of responses here seems to indicate is it causing some fear and that is unfortunate.

ravencajun, baldy and spunbon are complete Linux addicts and very knowledgeable computer users and that is great. (Good to see you again Spunbon, you converted me to Mepis eventually. Thanks for that.) They frequent computer addicts forums where this kind of stuff is lapped up. They also come here offering excellent advice and help so my response is in no way an attack on anyone.

Googling 'clickjacking' only brings up 193,000 hits - not a huge amount. But of course that will grow as the threat spreads. If anyone cares for more info try Googling yourself and read some of the current reports.

Will I inform my family and friends of this threat? No, I will not. Why? There is nowhere near enough information to do so at present. There seems no immediate cure and hopefully most users act with due care when surfing the net so why create unrest in their minds. Perhaps I am being unfair but I do not think so.

Here is a link that might be useful: ClickJacking explained in simple terms

Lynn, if you trust those sites you can still open them with NoScript installed. When you click on a bookmarked page and it won't open look at the lower right hand corner of your screen and you will see a red circle with a red S in it. Click on it and you have an opportunity to allow or temporarily allow the scripts that are keeping you from viewing the page.