D-Shortiez Malvertising Campaign Exploits WebKit Back-Button Hijack

D-Shortiez Malvertising Campaign Exploits WebKit Back-Button Hijack

First seen 3 Mar 2026, 19:10 UTC •GbhackersCybersecuritynews •41.7

Article Content

Browse articles
ThreatCluster

The threat actor D-Shortiez has initiated a malvertising campaign that exploits a WebKit browser vulnerability, specifically targeting iOS Safari users. This campaign employs forced redirects to scam pages, effectively trapping users with no straightforward escape. The technique of forced redirects is not new but has been adapted in this ongoing campaign.

How this analysis works

Timeline

2026-03-03
D-Shortiez malvertising campaign reported
Date unknown
WebKit back-button hijack exploited in attacks
Date unknown
Users affected primarily include iOS Safari users

Extracted Entities

1 / 2