Intersection Observer V2 API is a technology platform tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed December 5, 2025; most recent activity December 5, 2025.
The Intersection Observer V2 API is a web platform API that allows scripts to monitor when elements intersect with a root or the viewport, enabling features like lazy loading and reveal-on-scroll. In cybersecurity terms, this observable surface could be leveraged by attackers to time and optimize UI deception. A recent report describes a novel clickjacking technique that relies on CSS and SVG, suggesting modern web APIs like Intersection Observer V2 may be exploited to improve the precision and reliability of such attacks.
A new technique utilizing SVG files has been identified, allowing attackers to create highly interactive clickjacking attacks. This vulnerability poses risks to users by enabling malicious actions through seemingly…