Exploits the trust a user has for a particular site Generally involves Web sites that display foreign data (Web mail, forums, syndicated content, etc.) Can be anything - executing malicious scripts, stealing cookies, etc. Popularized by the media