Typical severity: High. Likelihood of attack: Medium. An adversary tricks a victim into unknowingly initiating some action in one system while interacting with the UI from a seemingly completely different, usually an adversary controlled or intended, system.
If using the Firefox browser, use the NoScript plug-in that will help forbid iFrames. | Turn off JavaScript, Flash and disable CSS. | When maintaining an authenticated session with a privileged target system, do not use the same browser to navigate to unfamiliar sites to perform other activities. Finish working with the target system and logout first before proceeding to other tasks.