Malicious Twitch Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
Mon Sep 14 2026
IAM
Malware
cyberpress.org
A browser extension marketed as a Twitch enhancement tool has been found forwarding live OAuth session tokens belonging to more than 30,000 users to proxy infrastructure linked to a Russian-language bot service. Socket’s Threat Research Team identified the extension, named “Twitch Enhanced Viewer | JeetBot,” across both the Chrome Web Store and Firefox Add-ons repository. […]
The post Malicious Twitch Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service appeared first on Cyber Security News.