A Twitch extension with 30,000+ installs reportedly sent users’ active session keys to JeetBot, according to Socket.

No account takeovers are confirmed…

https://en.hacks.gr/prostheto-toy-twitch-me-pano-apo-30-000-egkatastaseis-estelne-kleidia-syndesis-sti-jeetbot/

#Twitch #JeetBot #BrowserPrivacy

#Twitch extension with 30K installs exposes users’ #OAuth tokens

https://www.bleepingcomputer.com/news/security/twitch-extension-with-30k-installs-exposes-users-oauth-tokens/

#cybersecurity #livestream #streaming #gaming #JeetBot #TwitchEnhancedViewer

Chrome and Firefox extension Twitch Enhanced Viewer | JeetBot, with 30K+ installs, was found sending Twitch OAuth tokens to a bot service via proxies and logging them in cleartext. #Twitch #JeetBot #OAuth

🚨 📺 Twitch extension leaks 31,000 tokens

#JeetBot exposed OAuth tokens through operator-controlled proxies, enabling access to users’ chats, whispers and settings.

🔗 read more: securityonline.info/...

#ransomNews #cyberthreats #Twitch

JeetBot Twitch extension leaked OAuth tokens from ~31,000 users—update to version 85.8.7 or disable. #Twitch #OAuth #BrowserSecurity #JeetBot #DataLeak #SecurityNews https://thedailytechfeed.com/twitch-extension-jeetbot-leaks-oauth-tokens-from-31000-accounts/

Malicious Twitch extension "JeetBot" exposed 30,000 users by forwarding live OAuth tokens to operator-controlled proxies, linking Chrome and Firefox add-ons to a Russian bot service. #Twitch #JeetBot #Russia