Back Cybersecuritynews

Malvertising Threat Actor ‘D‑Shortiez’ Abuses WebKit Back‑Button Hijack in Forced‑Redirect Browser Campaign

Cybersecuritynews •Tushar Subhra Dutta • March 3, 2026

A threat actor tracked as D-Shortiez has been running a persistent malvertising campaign that turns a WebKit browser behavior into a trap, forcing iOS Safari users into scam pages with no easy way out. The campaign is not entirely new in concept — forced redirect attacks have long been a fixture of the online ad […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

D-Shortiez Malvertising Campaign Exploits WebKit Back-Button Hijack The threat actor D-Shortiez has initiated a malvertising campaign that exploits a WebKit browser vulnerability, specifically targeting iOS Safari users. This campaign employs forced redirects to scam pages, effectively trapping users with no straightforward escape. The technique of forced redirects is not new but has been adapted in this ongoing campaign. 2 sources 42

Extracted Entities

Malvertising Threat Actor ‘D‑Shortiez’ Abuses WebKit Back‑Button Hijack in Forced‑Redirect Browser Campaign

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (3)