Cursor location tracking by triggering background image downloads through CSS :hover rules
The attack scenario is described here: https://twitter.com/davywtf/status/1124130932573839360
The code for the demo can be found here: https://gist.github.com/wybiral/c8f46fdf1fc558d631b55de3a0267771
Trac:
Username: ehsan.akhgari@gmail.com