The invisible box is created fresh every 15 seconds at the cursor's current position. So each time the restriction activates, the box appears in a different spot on the screen depending on where the victim has managed to move the cursor. This makes the behavior seem completely random and even harder to diagnose.