97% of U.S. Banks Allow Clickjacking Fraud. 44% Don’t Even Use SSL.