H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

This attack pattern combines malicious Javascript and a legitimate webpage loaded into a concealed iframe. The malicious Javascript is then able to interact with a legitimate webpage in a manner that is unknown to the user. This attack usually leverages some element of social engineering in that an attacker must convinces a user to visit a web page that the attacker controls.

Labels

attack-patterncapec
1 recorded

Relationships

child-ofTechnique
1 external

References

capec
CAPEC-587
open