In this example I'm showing how to use user's behavior statistics in order to improve cusrorjacking (and potentially clickjacking) attack. Please use text below as a training field and click on the links below (they won't navigate you anywere). At the bottom of the page you'll see your click statistics: down - time in ms from the point when cursor entered into link area to the point when user pressed mouse button, up - time from down to mouse release button. The more time you click the more accurate our guess will be.

Based on this data we can make an assumption when remove substrate div from under user's cursor. Once you clicked on the links in the text try to click in the same manner into the link "Click on me!" in gray area, if attack will be successfull you'll see changed "Follow" button, if not - try to reload the page and perform test again.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Vestibulum cursus mattis odio sed aliquet. Etiam feugiat, massa eget mollis rhoncus, libero leo egestas ligula, in suscipit sem sem eget tellus. Suspendisse potenti. Vestibulum imperdiet, enim sit amet hendrerit molestie, felis purus sodales tellus, non posuere sem felis id nibh. Ut vitae eros lectus, in dapibus orci. Donec ultrices pharetra nisi, sit amet ultricies neque scelerisque pharetra. Aliquam eleifend eleifend venenatis. Donec eu nisl justo. Ut aliquet sapien sed odio bibendum et tincidunt tortor vestibulum. Quisque ligula tortor, pellentesque ut scelerisque quis, commodo eu nisl. Aenean pellentesque, diam in interdum vestibulum, quam nisi elementum massa, id tincidunt neque nibh sed lorem. Suspendisse laoreet lectus nec nisi aliquet at mollis turpis tincidunt. In quis turpis tortor.

Nunc tincidunt volutpat eros dictum elementum. Mauris vel turpis eget odio faucibus interdum. Duis sed mi in nunc egestas mollis vestibulum non dolor. Cras tortor arcu, luctus euismod dapibus vitae, dignissim in mi. In ante lectus, tincidunt vel aliquet lobortis, euismod vitae quam. Sed tempor tristique mi vel dictum. Integer tincidunt lacinia ipsum, quis fermentum orci pellentesque non. Aliquam ac diam est. Sed et nunc at lorem commodo interdum commodo et lacus. Aenean erat erat, semper nec sagittis at, elementum id nunc. Phasellus id enim sed risus fringilla hendrerit id in quam. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Pellentesque nec mauris urna.