What is the name of the attack if:
- there is a forum on the goodwebsite.comm
- there is an attacker website badwebsite.comm
The form on the goodwebsite.comm allows us to insert iframes, and using window.top.location we can redirect the parent page to any page, ex.: badwebsite.comm to show the users a login form that looks similar that is on goodwebsite.comm. After the users gaved their user/pw, they will be redirected to the original page/forum of goodwebsite.comm. Next time they refresh the page, they will be NO login screen, because we stored a cookie, thus only showing fake login page from badwebsite.comm when it's the first visit.
Question: what is this attack called?