227
Popular Twitch ad blocker caught sending live account credentials to Russian proxies (socket.dev)
submitted 1 month ago* (last edited 1 month ago) by to c/technology@lemmy.world
24 comments fedilink hide all child comments
 

cross-posted from: https://piefed.world/c/tech/p/1400813/popular-twitch-ad-blocker-caught-sending-live-account-credentials-to-russian-proxies

Threat Research Team identified a cross-store browser extension, “Twitch Enhanced Viewer | JeetBot,” that forwards each user’s live Twitch OAuth session token to proxy servers operated by a Russian commercial bot service. The extension ships on both the Chrome Web Store (extension ID pnhhdhhcadcjfckjhpmjneldiegbojfb, 30,000 users) and Firefox Add-ons (twitchenhancedviewer@example.com, 552 users). Both listings are live at time of writing.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 1 month ago

Realistically those oath tokens get sold to scrapers and bots. The suspicious activity goes on your account and you can get an account ban

(don’t know if that bans you from Amazon, but if we were all banned from Amazon, that would be better for the world).

  • permalink
  • fedilink
  • source
  • parent