HomeGlossary › Mobile concepts

Mobile concepts

Tapjacking

Tapjacking is an attack that tricks a user into tapping something different from what they think they are tapping. A malicious overlay sits on top of a real screen, so a tap meant for one button actually hits a hidden control underneath.

It is mainly an Android concern and is countered by app and platform settings that stop other windows from drawing over sensitive screens. Testing checks whether sensitive screens are protected against overlays.

Related terms

WebView Security

Mobexa tests the exact Android or iOS build you ship and maps every finding to the OWASP Mobile Top 10 and MASVS.

Start Free Trial