A method for tricking website users by placing a transparent layer with active elements over the main content of a page. Thinking they are clicking a button or link on a legitimate site, the user can inadvertently run a malicious script that performs a cybercriminal action, such as a redirect to another address. If the scammer lays an invisible dialog box on top of a login form, they can steal credentials entered by users.