Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
socket.dev
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.

cross-posted from: https://piefed.world/c/tech/p/1400813/popular-twitch-ad-blocker-caught-sending-live-account-credentials-to-russian-proxies

Threat Research Team identified a cross-store browser extension, “Twitch Enhanced Viewer | JeetBot,” that forwards each user’s live Twitch OAuth session token to proxy servers operated by a Russian commercial bot service. The extension ships on both the Chrome Web Store (extension ID pnhhdhhcadcjfckjhpmjneldiegbojfb, 30,000 users) and Firefox Add-ons (twitchenhancedviewer@example.com, 552 users). Both listings are live at time of writing.

    • Nugscree@lemmy.worldEnglish
      17·
      2 days ago

      For Twitch it does, they inline the video ads with the stream, uBlock can’t do anything about that, and if you have a blocker that does work Twitch just infinitely refreshes the stream trying to force the video ad.

      • kuiskaaja@lemmy.mlEnglish
        21·
        2 days ago

        i mean it only blocks like 80-90% of twitch ads so people sometimes use other adblockers for twitch alongside ublock

        however the twitch adblockers never really worked for me, broke playback all the time so i never use them