Stupid CSS Tricks
Summary: Cisco Talos's VRT observed a malvertising campaign that hides malicious iframes by setting CSS position values of -1,000 for both left and top, pushing a 6x10-pixel iframe so far off-screen the browser never renders it. The technique departs from the older practice of shrinking iframes to near-zero size, and the VRT notes that Snort signature SID 23618 detects this particular variant.
Key Takeaway: The campaign relies on a page looking normal to the person browsing it, so a user seeing no signs of strange activity is exactly the condition under which the hidden iframe does its work.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026