---
title: Malvertiser exploited 2 browser bugs to show 1 billion malicious ads
description: eGobbler exploits bugs in Chrome for iOS, Chrome, and Safari for desktop to show popup ads and redirect users to malicious sites
image: https://www.confiant.com/hubfs/Imported_Blog_Media/Confiant%20Logo-2-Nov-04-2021-10-10-59-58-PM.png
---

- [Press](https://www.confiant.com/news/tag/press)

![Team Confiant](https://www.confiant.com/hubfs/23ws/confiant-logo-bluebg.png)

**ZDNet** Sep 30, 2019 12:00:00 AM  •   1 minute read

# Malvertiser exploited 2 browser bugs to show 1 billion malicious ads

![](https://www.confiant.com/hubfs/Imported_Blog_Media/Confiant%20Logo-2-Nov-04-2021-10-10-59-58-PM.png)

Over the past six months, a criminal group specialized in showing malicious ads (malvertising) has used **two obscure browser bugs** to bypass browser security protections and successfully show intrusive popup ads and redirect users to malicious sites.

The group's name is **eGobbler** and has been active since last Thanksgiving when security researchers spotted its first malvertising campaigns.

**eGobbler** typically operates in short bursts of activity that only last a few days. During these bursts, the group buys ads on legitimate services but injects malicious code inside the adverts so their exploits break out of the ad's secure iframe container and perform malicious actions inside users' browsers, untethered.

Commonly, these actions involve showing popup ads for various shady products, or redirecting the user to a malicious site hosting scams or malware-laced downloads.

Historically, the group has targeted mobile devices, where most users don't employ ad blockers, and where browsers are not as hardened against exploits [as their desktop counterparts](https://www.bleepingcomputer.com/news/security/rig-exploit-kit-usage-declines-as-browsers-are-getting-harder-to-hack/), making their campaigns many times more effective.

[But in a report](https://blog.confiant.com/malvertiser-egobbler-exploits-chrome-webkit-bugs-infects-over-1-billion-ads-6b8ccc41b0e6) shared privately with ZDNet last week, **Confiant**, a cyber-security firm specialized in tracking malvertising campaigns, said the group found a second bug over the summer, right after **Google devs** patched the Chrome for iOS exploit. It's like the group intentionally went looking for a new bug to exploit, and found it a few months later, in August.

**Read Complete Article:** [https://www.zdnet.com/article/malvertiser-exploited-two-browser-bugs-to-show-over-one-billion-malicious-ads/](https://www.zdnet.com/article/malvertiser-exploited-two-browser-bugs-to-show-over-one-billion-malicious-ads/)

## Browse all our topics

- [Press](https://www.confiant.com/news/tag/press)
- [Malvertising](https://www.confiant.com/news/tag/malvertising)
- [Ad Tech](https://www.confiant.com/news/tag/ad-tech)
- [Cybersecurity](https://www.confiant.com/news/tag/cybersecurity)
- [Confiant](https://www.confiant.com/news/tag/confiant)
- [Platforms](https://www.confiant.com/news/tag/platforms)
- [Report](https://www.confiant.com/news/tag/report)
- [Publishers](https://www.confiant.com/news/tag/publishers)
- [Privacy](https://www.confiant.com/news/tag/privacy)
- [Ad Quality](https://www.confiant.com/news/tag/ad-quality)
- [Transparency](https://www.confiant.com/news/tag/transparency)
- [Bad Ads](https://www.confiant.com/news/tag/bad-ads)
- [Programmatic Advertising](https://www.confiant.com/news/tag/programmatic-advertising)
- [Ad Fraud](https://www.confiant.com/news/tag/ad-fraud)
- [Advertising](https://www.confiant.com/news/tag/advertising)
- [Awareness](https://www.confiant.com/news/tag/awareness)
- [Black Friday](https://www.confiant.com/news/tag/black-friday)
- [Supply Chain Integrity](https://www.confiant.com/news/tag/supply-chain-integrity)
- [Trust](https://www.confiant.com/news/tag/trust)

×

### Make online threats our problem. Not yours.

Join *1,000+* brands who trust Confiant to better their digital security. Request a free trial today.

- ![Magnite logo](https://www.confiant.com/hubfs/22/logo-w-magnite.png)
- ![Insider Inc logo](https://www.confiant.com/hubfs/22/logo-w-insider.png)
- ![Complex logo](https://www.confiant.com/hubfs/22/logo-w-complex.png)
- ![Vuukle logo](https://www.confiant.com/hubfs/22/logo-w-vuukle.png)