Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
socket.dev
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.

cross-posted from: https://piefed.world/c/tech/p/1400813/popular-twitch-ad-blocker-caught-sending-live-account-credentials-to-russian-proxies

Threat Research Team identified a cross-store browser extension, “Twitch Enhanced Viewer | JeetBot,” that forwards each user’s live Twitch OAuth session token to proxy servers operated by a Russian commercial bot service. The extension ships on both the Chrome Web Store (extension ID pnhhdhhcadcjfckjhpmjneldiegbojfb, 30,000 users) and Firefox Add-ons (twitchenhancedviewer@example.com, 552 users). Both listings are live at time of writing.

  • pulsewidth@lemmy.worldEnglish
    1·
    22 hours ago

    What’s wrong and bad about it, in your opinion? I’m no pixel art expert, but it sounds like you may be?

    • OccasionallyFeralya@lemmy.mlEnglish
      1·
      21 hours ago

      I can’t speak to the pixel are but the website itself also looks ai generated (as in the design not necessarily the writing). Also its homepage advertises its services as ai powered.

      • pulsewidth@lemmy.worldEnglish
        1·
        5 hours ago

        Yeah, I had a peek too. It might be ai, but I haven’t seen any actual evidence of it - they use this pixel art style on a lot of their posts and it seems consistently decent.

        Looking at their company photo they’re very well funded and also have a team of like 60 people, so there’s no reason they couldn’t have an in-house graphics artist or a freelancer they contract. Or it could be ai.

        But in times where every modern graphics artists is being accused of being AI, I’m inclined to assume not rather than assume it is, without evidence to the contrary.