---
title: Webkit zero-day exploit besieges Mac & iOS with malvertising redirects
description: Flaw rendered ad-sandboxing protections 'entirely useless', researchers say.
---

[News - Confiant ](https://www.confiant.com/news)

# [Webkit zero-day exploit besieges Mac & iOS with malvertising redirects](https://www.confiant.com/news/webkit-zero-day-exploit-besieges-mac-and-ios-with-malvertising-redirects)

 Written by [ArsTechnica](https://www.confiant.com/news/author/arstechnica) | Sep 30, 2019 4:00:00 AM

Attackers have bombarded the Internet with more than **1 billion malicious ads** in less than two months. The attackers targeted iOS and macOS users with what were zero-day vulnerabilities in Chrome and Safari browsers that were recently patched, researchers said on Monday.

More than 1 billion malicious ads served in the past six weeks contained exploit code that **redirected** vulnerable users to malicious sites, according to a [post published by security firm **Confiant**](https://blog.confiant.com/malvertiser-egobbler-exploits-chrome-webkit-bugs-infects-over-1-billion-ads-6b8ccc41b0e6). The surge of malicious ads exploited a Safari vulnerability in both iOS and macOS, as well as a Chrome vulnerability in iOS.

**Staggering Volume**

> "If we take a snapshot of **eGobbler** activity from August 1 to September 23, 2019, then we see a staggering volume of impacted programmatic impressions," Confiant researcher and engineer **Eliya Stein** wrote. "By our estimates, we believe up to 1.16 billion impressions have been affected."

**Read Complete Article:** [https://arstechnica.com/information-technology/2019/09/webkit-zeroday-exploit-besieges-mac-and-ios-users-with-malvertising-redirects/](https://arstechnica.com/information-technology/2019/09/webkit-zeroday-exploit-besieges-mac-and-ios-users-with-malvertising-redirects/)

[View full post](https://www.confiant.com/news/webkit-zero-day-exploit-besieges-mac-and-ios-with-malvertising-redirects)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "ArsTechnica"
  },
  "dateModified" : "2023-01-11T08:03:29.339Z",
  "datePublished" : "2019-09-30T04:00:00Z",
  "headline" : "Webkit zero-day exploit besieges Mac & iOS with malvertising redirects",
  "image" : {
    "@type" : "ImageObject",
    "height" : 486,
    "url" : "https://f.hubspotusercontent20.net/hubfs/5994026/Imported_Blog_Media/Confiant%20Logo-2-Nov-04-2021-10-10-59-58-PM.png",
    "width" : 508
  },
  "mainEntityOfPage" : "https://www.confiant.com/news/webkit-zero-day-exploit-besieges-mac-and-ios-with-malvertising-redirects",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "News"
  }
}
```