Clickjacking

Is technique by which an attacker creates iFrame using CSS and Javascript, which creates a fake button. By pressing (or automatically, without user action) on the button the user loads the invisible iframe with a page with malicious code. Hidden page could be a fake and force the user to do what he would not otherwise, for example, re-authenticate, or to read its registration data.