More than a decade after hitting the headlines, clickjacking fraud remains an under-reported hazard on hundreds of popular websites.