A Twitch extension with 30,000+ installs reportedly sent users’ active session keys to JeetBot, according to Socket.
No account takeovers are confirmed…
https://en.hacks.gr/prostheto-toy-twitch-me-pano-apo-30-000-egkatastaseis-estelne-kleidia-syndesis-sti-jeetbot/
#Twitch #JeetBot #BrowserPrivacy
No account takeovers are confirmed…
https://en.hacks.gr/prostheto-toy-twitch-me-pano-apo-30-000-egkatastaseis-estelne-kleidia-syndesis-sti-jeetbot/
#Twitch #JeetBot #BrowserPrivacy
September 16, 2026 at 12:55 PM
A Twitch extension with 30,000+ installs reportedly sent users’ active session keys to JeetBot, according to Socket.
No account takeovers are confirmed…
https://en.hacks.gr/prostheto-toy-twitch-me-pano-apo-30-000-egkatastaseis-estelne-kleidia-syndesis-sti-jeetbot/
#Twitch #JeetBot #BrowserPrivacy
No account takeovers are confirmed…
https://en.hacks.gr/prostheto-toy-twitch-me-pano-apo-30-000-egkatastaseis-estelne-kleidia-syndesis-sti-jeetbot/
#Twitch #JeetBot #BrowserPrivacy
Chrome and Firefox extension Twitch Enhanced Viewer | JeetBot, with 30K+ installs, was found sending Twitch OAuth tokens to a bot service via proxies and logging them in cleartext. #Twitch #JeetBot #OAuth
Twitch Extension With 30K Installs Exposes Users’ OAuth Tokens
A browser extension named Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, is sending Twitch OAuth session tokens to a commercial bot service through proxy servers. Socket found that the extension captures users’ authorization headers, leaks tokens in cleartext logs, and recommends removing the extension and re-authenticating Twitch sessions. #TwitchEnhancedViewer #JeetBot #Twitch
www.hendryadrian.com
September 15, 2026 at 12:45 AM
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
www.bleepingcomputer.com
September 14, 2026 at 7:04 PM
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
Attention si jamais vous avez installé cette extension sur votre navigateur ( Twitch Enhanced Viewer | JeetBot ) elle vole les infos de session de votre connexion à Twitch.
Désinstallez l'extension et déconnectez/reconnectez vous sur Twitch sur le navigateur en question
Désinstallez l'extension et déconnectez/reconnectez vous sur Twitch sur le navigateur en question
A Twitch Browser Extension exposed 30,000 users' OAuth tokens to a Russian bot service.
The extension promised to block Twitch ads, force 1080p, and auto-collect channel points.
Users: Remove the Chrome/Firefox extension, then disconnect all sessions + reauthenticate.
socket.dev/blog/malicio...
The extension promised to block Twitch ads, force 1080p, and auto-collect channel points.
Users: Remove the Chrome/Firefox extension, then disconnect all sessions + reauthenticate.
socket.dev/blog/malicio...
September 14, 2026 at 2:09 PM
Attention si jamais vous avez installé cette extension sur votre navigateur ( Twitch Enhanced Viewer | JeetBot ) elle vole les infos de session de votre connexion à Twitch.
Désinstallez l'extension et déconnectez/reconnectez vous sur Twitch sur le navigateur en question
Désinstallez l'extension et déconnectez/reconnectez vous sur Twitch sur le navigateur en question
JeetBot Twitch extension leaked OAuth tokens from ~31,000 users—update to version 85.8.7 or disable. #Twitch #OAuth #BrowserSecurity #JeetBot #DataLeak #SecurityNews https://thedailytechfeed.com/twitch-extension-jeetbot-leaks-oauth-tokens-from-31000-accounts/
September 14, 2026 at 9:09 AM
JeetBot Twitch extension leaked OAuth tokens from ~31,000 users—update to version 85.8.7 or disable. #Twitch #OAuth #BrowserSecurity #JeetBot #DataLeak #SecurityNews https://thedailytechfeed.com/twitch-extension-jeetbot-leaks-oauth-tokens-from-31000-accounts/
Malicious JeetBot Extension Leaks Twitch OAuth Tokens of 31,000 Users
Approximately 31,000 Twitch users have had their OAuth session tokens leaked by the JeetBot browser extension, exposing accounts to unauthorised access.
Approximately 31,000 Twitch users have had their OAuth session tokens leaked by the JeetBot browser extension, exposing accounts to unauthorised access.
Malicious JeetBot Extension Leaks Twitch OAuth Tokens of 31,000 Users
Approximately 31,000 Twitch users have had their OAuth session tokens leaked by the JeetBot browser extension, exposing accounts to unauthorised access.
privacyneedle.com
September 14, 2026 at 10:32 AM
Malicious JeetBot Extension Leaks Twitch OAuth Tokens of 31,000 Users
Approximately 31,000 Twitch users have had their OAuth session tokens leaked by the JeetBot browser extension, exposing accounts to unauthorised access.
Approximately 31,000 Twitch users have had their OAuth session tokens leaked by the JeetBot browser extension, exposing accounts to unauthorised access.
🚨 📺 Twitch extension leaks 31,000 tokens
#JeetBot exposed OAuth tokens through operator-controlled proxies, enabling access to users’ chats, whispers and settings.
🔗 read more: securityonline.info/...
#ransomNews #cyberthreats #Twitch
#JeetBot exposed OAuth tokens through operator-controlled proxies, enabling access to users’ chats, whispers and settings.
🔗 read more: securityonline.info/...
#ransomNews #cyberthreats #Twitch
September 14, 2026 at 5:37 PM
🚨 📺 Twitch extension leaks 31,000 tokens
#JeetBot exposed OAuth tokens through operator-controlled proxies, enabling access to users’ chats, whispers and settings.
🔗 read more: securityonline.info/...
#ransomNews #cyberthreats #Twitch
#JeetBot exposed OAuth tokens through operator-controlled proxies, enabling access to users’ chats, whispers and settings.
🔗 read more: securityonline.info/...
#ransomNews #cyberthreats #Twitch
#twitch extension with 30K installs exposes users’ #oauth tokens
https://www.bleepingcomputer.com/news/security/twitch-extension-with-30k-installs-exposes-users-oauth-tokens/
#cybersecurity #livestream #streaming #gaming #jeetbot #twitchenhancedviewer
https://www.bleepingcomputer.com/news/security/twitch-extension-with-30k-installs-exposes-users-oauth-tokens/
#cybersecurity #livestream #streaming #gaming #jeetbot #twitchenhancedviewer
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
www.bleepingcomputer.com
September 15, 2026 at 4:01 PM
#twitch extension with 30K installs exposes users’ #oauth tokens
https://www.bleepingcomputer.com/news/security/twitch-extension-with-30k-installs-exposes-users-oauth-tokens/
#cybersecurity #livestream #streaming #gaming #jeetbot #twitchenhancedviewer
https://www.bleepingcomputer.com/news/security/twitch-extension-with-30k-installs-exposes-users-oauth-tokens/
#cybersecurity #livestream #streaming #gaming #jeetbot #twitchenhancedviewer
A malicious Twitch browser extension, Twitch Enhanced Viewer | JeetBot, leaked OAuth tokens of nearly 31,000 users to Russian proxy servers. Developers: HISHIMIRO/jeetbot.cc. Beware.
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
JeetBot's Twitch extension sent OAuth tokens from nearly 31,000 users to operator-controlled proxies; Firefox 85.8.7 stops the behavior.
thehackernews.com
September 18, 2026 at 11:32 AM
A malicious Twitch browser extension, Twitch Enhanced Viewer | JeetBot, leaked OAuth tokens of nearly 31,000 users to Russian proxy servers. Developers: HISHIMIRO/jeetbot.cc. Beware.
PSA for Twitch users:
Twitch Enhanced Viewer / JeetBot was found extracting the OAuth token used by Twitch’s own web client and forwarding it to infrastructure controlled by the extension operator.
If you used the extension, remove it and revoke your Twitch sessions (yes, all of them!).
Twitch Enhanced Viewer / JeetBot was found extracting the OAuth token used by Twitch’s own web client and forwarding it to infrastructure controlled by the extension operator.
If you used the extension, remove it and revoke your Twitch sessions (yes, all of them!).
September 14, 2026 at 4:58 PM
PSA for Twitch users:
Twitch Enhanced Viewer / JeetBot was found extracting the OAuth token used by Twitch’s own web client and forwarding it to infrastructure controlled by the extension operator.
If you used the extension, remove it and revoke your Twitch sessions (yes, all of them!).
Twitch Enhanced Viewer / JeetBot was found extracting the OAuth token used by Twitch’s own web client and forwarding it to infrastructure controlled by the extension operator.
If you used the extension, remove it and revoke your Twitch sessions (yes, all of them!).
Malicious Twitch extension "JeetBot" exposed 30,000 users by forwarding live OAuth tokens to operator-controlled proxies, linking Chrome and Firefox add-ons to a Russian bot service. #Twitch #JeetBot #Russia
Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens To Russian Bot Service
Socket’s Threat Research Team found that the cross-store browser extension “Twitch Enhanced Viewer | JeetBot” forwards users’ live Twitch OAuth session tokens to operator-controlled proxy infrastructure, exposing account-scoped credentials across Chrome and Firefox. Earlier versions even POSTed the token to a dedicated set-token endpoint, and the operator’s infrastructure is tied to the JeetBot commercial Twitch, Kick, and VK-Live bot service. #TwitchEnhancedViewer #JeetBot #ChromeWebStore #FirefoxAddons
www.hendryadrian.com
September 12, 2026 at 12:30 AM
「Twitch Enhanced Viewer | JeetBot」は、30Kインストールされており、ユーザーのTwitch OAuthトークンを商業ボットサービスに送信します。
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
www.bleepingcomputer.com
September 14, 2026 at 7:51 PM
「Twitch Enhanced Viewer | JeetBot」は、30Kインストールされており、ユーザーのTwitch OAuthトークンを商業ボットサービスに送信します。
Ojito: Una extensión para Twitch filtró tokens OAuth de casi 31.000 usuarios
Una extensión para Twitch filtró tokens OAuth de casi 31.000 usuarios
La extensión Twitch Enhanced Viewer | JeetBot, disponible en tiendas oficiales de Chrome y Firefox, reenviaba tokens OAuth de sesión a proxies controlados por su operador. Con esos tokens, un terce…
unaaldia.hispasec.com
September 21, 2026 at 4:04 PM
Ojito: Una extensión para Twitch filtró tokens OAuth de casi 31.000 usuarios
iT4iNT SERVER Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users VDS VPS Cloud #Twitch #CyberSecurity #DataBreach #OAuthTokens #BrowserExtension
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service.
The extension, named "Twitch Enhanced Viewer | JeetBot," lists HISHIMIRO/jeetbot.cc as its developer and has the following identifiers on the Google Chrome Web Store and Mozilla Firefox Add-Ons store -
Chrome -
dlvr.it
September 14, 2026 at 9:57 AM
iT4iNT SERVER Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users VDS VPS Cloud #Twitch #CyberSecurity #DataBreach #OAuthTokens #BrowserExtension
JeetBot, as a Russian bot service, is a streamer tool. Streamers add it, for example, to voiceover chat messages. It is not (officially, at least) a bot service that is "buy viewers" type of service. It is a chat bot, functionally close to Nightbot and alike.
September 15, 2026 at 12:07 PM
JeetBot, as a Russian bot service, is a streamer tool. Streamers add it, for example, to voiceover chat messages. It is not (officially, at least) a bot service that is "buy viewers" type of service. It is a chat bot, functionally close to Nightbot and alike.
Twitch-extensie lekt gevoelige accounttokens via externe servers
Een browserextensie genaamd Twitch Enhanced Viewer | JeetBot, beschikbaar voor zowel Chrome als Firefox, heeft live accounttokens van gebruikers gelekt via servers van derden. De extensie, die werd gepromoot al...
Een browserextensie genaamd Twitch Enhanced Viewer | JeetBot, beschikbaar voor zowel Chrome als Firefox, heeft live accounttokens van gebruikers gelekt via servers van derden. De extensie, die werd gepromoot al...
Twitch-extensie lekt gevoelige accounttokens via externe servers
Een browserextensie genaamd Twitch Enhanced Viewer | JeetBot, beschikbaar voor zowel Chrome als Firefox, heeft live accounttokens van gebruikers gelekt via servers van derden. De extensie, die werd gepromoot als een hulpmiddel om Twitch-ervaringen te verbeteren, bood functies zoals advertentieblokkering, afspelen in hogere kwaliteit, regio-ontgrendeling van streams en automatische kanaalpuntverzameling. Om deze functies te realiseren, leidde de extensie Twitch-afspeellijstverzoeken om via proxy's van derden. Tijdens dit proces werd de OAuth-sessietoken van de ingelogde gebruiker vastgelegd en blootgesteld aan deze proxysystemen. Dit beveiligingsgegeven, dat op accountniveau opereert, is g...
newsfacts.info
September 14, 2026 at 2:00 PM
Twitch-extensie lekt gevoelige accounttokens via externe servers
Een browserextensie genaamd Twitch Enhanced Viewer | JeetBot, beschikbaar voor zowel Chrome als Firefox, heeft live accounttokens van gebruikers gelekt via servers van derden. De extensie, die werd gepromoot al...
Een browserextensie genaamd Twitch Enhanced Viewer | JeetBot, beschikbaar voor zowel Chrome als Firefox, heeft live accounttokens van gebruikers gelekt via servers van derden. De extensie, die werd gepromoot al...
Una extensión para Twitch filtró tokens OAuth de casi 31,000 usuarios
Vía: Una al día (@Hispasec)
Vía: Una al día (@Hispasec)
Una extensión para Twitch filtró tokens OAuth de casi 31.000 usuarios
La extensión Twitch Enhanced Viewer | JeetBot, disponible en tiendas oficiales de Chrome y Firefox, reenviaba tokens OAuth de sesión a proxies controlados por su operador. Con esos tokens, un terce…
unaaldia.hispasec.com
September 14, 2026 at 7:44 PM
Una extensión para Twitch filtró tokens OAuth de casi 31,000 usuarios
Vía: Una al día (@Hispasec)
Vía: Una al día (@Hispasec)
🟢 Twitch Extension Exposed OAuth Tokens of Tens of Thousands of Users
🗨️ Researchers at Socket discovered that the Twitch Enhanced Viewer | JeetBot browser extension, aimed at Russian-speaking …
#news
🗨️ Researchers at Socket discovered that the Twitch Enhanced Viewer | JeetBot browser extension, aimed at Russian-speaking …
#news
Twitch Extension Exposed OAuth Tokens of Tens of Thousands of Users
Read more
hackmag.com
September 17, 2026 at 6:00 PM
🟢 Twitch Extension Exposed OAuth Tokens of Tens of Thousands of Users
🗨️ Researchers at Socket discovered that the Twitch Enhanced Viewer | JeetBot browser extension, aimed at Russian-speaking …
#news
🗨️ Researchers at Socket discovered that the Twitch Enhanced Viewer | JeetBot browser extension, aimed at Russian-speaking …
#news
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service.
The extension, named "Twitch…
#hackernews #news
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service.
The extension, named "Twitch…
#hackernews #news
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service.
The extension, named "Twitch Enhanced Viewer | JeetBot," lists HISHIMIRO/jeetbot.cc as its developer and has the following identifiers on the Google Chrome Web Store and Mozilla Firefox Add-Ons store -
Chrome -
thehackernews.com
September 15, 2026 at 6:36 AM
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service.
The extension, named "Twitch…
#hackernews #news
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service.
The extension, named "Twitch…
#hackernews #news
Twitch 拡張機能「Twitch Enhanced Viewer | JeetBot」がOAuthトークンを外部送信-Twitchの全セッションを切断を推奨
rocket-boys.co.jp/security-mea...
#セキュリティ対策Lab #security #securitynews #セキュリティ
rocket-boys.co.jp/security-mea...
#セキュリティ対策Lab #security #securitynews #セキュリティ
Twitch 拡張機能「Twitch Enhanced Viewer | JeetBot」がOAuthトークンを外部送信-Twitchの全セッションを切断を推奨|セキュリティニュースのセキュリティ対策Lab
Socketは、Twitch向け拡張機能「Twitch Enhanced Viewer | JeetBot」が利用者のOAuthトークンを外部プロキシへ送信していると報告しました。Chromeでは3万ユーザーが利用。仕組み、影響、確認済み事実、削除後の対応を整理
rocket-boys.co.jp
September 16, 2026 at 3:45 AM
Twitch 拡張機能「Twitch Enhanced Viewer | JeetBot」がOAuthトークンを外部送信-Twitchの全セッションを切断を推奨
rocket-boys.co.jp/security-mea...
#セキュリティ対策Lab #security #securitynews #セキュリティ
rocket-boys.co.jp/security-mea...
#セキュリティ対策Lab #security #securitynews #セキュリティ
Heads-up for anyone using "Twitch Enhanced Viewer | JeetBot"
A Twitch Browser Extension exposed 30,000 users' OAuth tokens to a Russian bot service.
The extension promised to block Twitch ads, force 1080p, and auto-collect channel points.
Users: Remove the Chrome/Firefox extension, then disconnect all sessions + reauthenticate.
socket.dev/blog/malicio...
The extension promised to block Twitch ads, force 1080p, and auto-collect channel points.
Users: Remove the Chrome/Firefox extension, then disconnect all sessions + reauthenticate.
socket.dev/blog/malicio...
September 14, 2026 at 4:26 PM
Heads-up for anyone using "Twitch Enhanced Viewer | JeetBot"
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
#hackernews #news
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
#hackernews #news
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
www.bleepingcomputer.com
September 15, 2026 at 6:47 PM
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
#hackernews #news
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
#hackernews #news