Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
Brief
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service.
The extension, named "Twitch Enhanced Viewer
- JeetBot," lists HISHIMIRO/jeetbot.cc as its developer and has the following identifiers on the Google Chrome Web Store and Mozilla Firefox Add-Ons store -
Chrome -