Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
socket.dev
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.

cross-posted from: https://piefed.world/c/tech/p/1400813/popular-twitch-ad-blocker-caught-sending-live-account-credentials-to-russian-proxies

Threat Research Team identified a cross-store browser extension, “Twitch Enhanced Viewer | JeetBot,” that forwards each user’s live Twitch OAuth session token to proxy servers operated by a Russian commercial bot service. The extension ships on both the Chrome Web Store (extension ID pnhhdhhcadcjfckjhpmjneldiegbojfb, 30,000 users) and Firefox Add-ons (twitchenhancedviewer@example.com, 552 users). Both listings are live at time of writing.

  • DeathsEmbrace@lemmy.worldEnglish
    9·
    17 hours ago

    There is a script you can find that autoblocks twitch ads if you set it up properly. It’s popular but, I forgot it, it uses Ublock origin.

    • BurgerBaron@quokk.auEnglish
      15·
      16 hours ago

      Twitch Adblock Solutions on github? Developer rage quit in disgust of Amazon and archived the repo.

      This is the current darling extension to use:

      https://github.com/GosuDRM/TTV-AB

      It’ll use the standard definition preview stream until the ads stop playing, then switch to the regular stream.

  • pulsewidth@lemmy.worldEnglish
    2·
    18 hours ago

    Just wanted to say that’s a great little pixel art graphic for the story. I’m confident it’s not ai, because i like it.

    • M137@lemmy.todayEnglish
      5·
      18 hours ago

      Sorry but I really think it’s AI. The only time I played around with AI of any kind was to see how it’d handle pixelart and it looked very similar to this. It’s good at a very quick glance but quickly falls apart (like a lot of AI things) as soon as you actually look at it.

      I don’t see how a human could mess it up that oddly and badly. It would take more effort to make it this bad than just make actual pixel art, there are so many small things that make no sense as errors or sloppy/lazy human art.

    • yamper@piefed.socialEnglish
      3·
      18 hours ago

      it doesnt really adhere to any pixel grid. to be fair many pixel artists also dont adhere to a grid, but ai REALLY doesnt.