Web-based attack in which vulnerabilities in the browser and cookies are targeted. For this attack, a user would be authenticated to a site in one tab or window and then visit an attacker's page in another tab or window. The attacker's page would have a special embedded resource that would (unknowingly to the victim) trigger some action in the victim's authenticated page.