Researchers discovered a recent malvertising campaign from eGobbler  threat actor that targets millions of iOS users to hijack their sessions by leverage chrome vulnerability.

Attackers trick the targeted iOS users to redirect into Malicious lading page and this campaign can be recognized easily by their use of the “.world”

Session hijacking, sometimes also known as cookie hijacking is the exploitation of a valid computer session—sometimes also called a session key—to gain unauthorized access to information or services in a computer system.

Malvertisers using different methods for hijacking including redirected via a JavaScript, popups that redirect to new windows. The recent malvertising campaign that leans on pop-ups as the primary hijack mechanism.

Read Complete Article: https://gbhackers.com/egobbler-malvertising-campaign/