This has a long history dating back to the Flash era. https://owasp.org/www-community/attacks/Clickjacking https://owasp.org/www-community/attacks/Clickjacking

This has a long history dating back to the Flash era. https://owasp.org/www-community/attacks/Clickjacking https://owasp.org/www-community/attacks/Clickjacking > One of the most notorious examples of Clickjacking was an attack against the Adobe Flash plugin settings page. By loading this page into an invisible iframe, an attacker could trick a user into altering the security settings of Flash, giving permission for any Flash animation to utilize the computer’s microphone and camera.