SecurityThe Hacker Newsabout 3 hours ago
Malicious Twitch Extension Leaks 31K OAuth Tokens
1 min read
A malicious browser extension named "Twitch Enhanced Viewer | JeetBot" has leaked OAuth tokens from nearly 31,000 users to proxy servers. The extension, available on Chrome and Firefox, forwards user tokens in cleartext via a network redirect for every channel watched, except a hardcoded list of 10 Russian streamers. The developer has released an update to fix the issue.
Level
Hype check
Tap to vote and see what everyone thinks.