What are some real-world examples of CSRF attacks?

What are some real-world examples of CSRF attacks?

One notable example is the 2010 attack on Facebook, where attackers tricked users into changing their account settings.

How did that attack work?

The attackers created a malicious website that, when visited by a logged-in Facebook user, sent requests to change their settings.

Are there any other examples?

Yes, another example is the 2011 attack on the online banking platform, where users were redirected to a malicious site that executed transactions.

What can websites do to prevent CSRF attacks?

Websites can implement anti-CSRF tokens, validate HTTP referer headers, and use same-site cookies to mitigate these attacks.