The user is usually helpless in this case since the action required of her would be too late to be reversed once the invisible button is clicked. These actions would be forced on the user and it will be too late to undo anything that might have happened.
Apparently, the attack does not involve a code exploit like running a javascript script. According to someone who had visited the OWASP (Open web Application Security Project) presentation, all browsers are affected and it would happen even if you were to disable scripting in your browser.
With Clickjacking, the attacker has total control over the scenario. The bad guy can exploit on any link, button, or anything else you on which you might click on any malicious web page. And you wouldn’t have a clue as to whether you have been compromised.
Clickjacking is now seen as one of the worst possible risks to have surfaced yet, and was first discovered by Jeremiah Grossman and Robert “Rsnake” Hansen who described it as “Severely underappreciated and largely undefended”.
This problem is being examined by Adobe apparently and the development teams of almost all the browsers have sat up and taken notice. However, what would happen to the state of a proper anti-dote to this problem, only time can tell.
