A new hacking trick, "doubleclickjacking," turns an ordinary action into a sneaky way for attackers to take control of your account or change your device settings.