The infamous eGobbler hacking group has been caught running a new campaign exploiting two browser vulnerabilities to show intrusive pop-up ads and forcefully redirect users to malicious websites. The latest attack targeted users in Europe countries, with a majority being from Italy. In April, the group was exploiting a then-zero-day vulnerability (CVE-2019-5840) in Chrome for iOS back in April, which allowed them to successfully bypass browser’s built-in pop-ups on iOS devices and hijack 500 million mobile user sessions in a week.
Source: https://thehackernews.com/2019/10/malvertising-webkit-hacking.html