The invisible box is 150 by 150 pixels. That is a very small area of the screen -- just big enough to let the victim move the cursor a little bit, but too small to reach anything useful. The box is centered on wherever the cursor happens to be when the restriction kicks in.