#JeetBot
LightNews LightNews
pabloyglesias.com
Ojito: Una extensión para Twitch filtró tokens OAuth de casi 31.000 usuarios

Una extensión para Twitch filtró tokens OAuth de casi 31.000 usuarios
La extensión Twitch Enhanced Viewer | JeetBot, disponible en tiendas oficiales de Chrome y Firefox, reenviaba tokens OAuth de sesión a proxies controlados por su operador. Con esos tokens, un terce…
unaaldia.hispasec.com
September 21, 2026 at 4:04 PM
technoholic.bsky.social
A malicious Twitch browser extension, Twitch Enhanced Viewer | JeetBot, leaked OAuth tokens of nearly 31,000 users to Russian proxy servers. Developers: HISHIMIRO/jeetbot.cc. Beware.
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
JeetBot's Twitch extension sent OAuth tokens from nearly 31,000 users to operator-controlled proxies; Firefox 85.8.7 stops the behavior.
thehackernews.com
September 18, 2026 at 11:32 AM
hackmag.com
🟢 Twitch Extension Exposed OAuth Tokens of Tens of Thousands of Users

🗨️ Researchers at Socket discovered that the Twitch Enhanced Viewer | JeetBot browser extension, aimed at Russian-speaking …

#news
Twitch Extension Exposed OAuth Tokens of Tens of Thousands of Users
Read more
hackmag.com
September 17, 2026 at 6:00 PM
hacks.gr
A Twitch extension with 30,000+ installs reportedly sent users’ active session keys to JeetBot, according to Socket.

No account takeovers are confirmed…

https://en.hacks.gr/prostheto-toy-twitch-me-pano-apo-30-000-egkatastaseis-estelne-kleidia-syndesis-sti-jeetbot/

#Twitch #JeetBot #BrowserPrivacy
Πρόσθετο του Twitch με πάνω από 30.000 εγκαταστάσεις έστελνε κλειδιά σύνδεσης στη JeetBot
September 16, 2026 at 12:55 PM
rjow.bsky.social
www.tiktok.com/t/ZTUbo5xrw/
A popular Twitch browser extension called Twitch Enhanced Viewer, also known as JeetBot, was found forwarding live OAuth session tokens through operator-controlled infrastructure. Researchers say near...
TikTok video by The Intel Desk
www.tiktok.com
September 16, 2026 at 1:37 PM
kaiodan.bsky.social
www.bleepingcomputer.com/news/securit...
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
www.bleepingcomputer.com
September 16, 2026 at 8:29 AM
securitylab-jp.bsky.social
Twitch 拡張機能「Twitch Enhanced Viewer | JeetBot」がOAuthトークンを外部送信-Twitchの全セッションを切断を推奨
rocket-boys.co.jp/security-mea...

#セキュリティ対策Lab #security #securitynews #セキュリティ
Twitch 拡張機能「Twitch Enhanced Viewer | JeetBot」がOAuthトークンを外部送信-Twitchの全セッションを切断を推奨|セキュリティニュースのセキュリティ対策Lab
Socketは、Twitch向け拡張機能「Twitch Enhanced Viewer | JeetBot」が利用者のOAuthトークンを外部プロキシへ送信していると報告しました。Chromeでは3万ユーザーが利用。仕組み、影響、確認済み事実、削除後の対応を整理
rocket-boys.co.jp
September 16, 2026 at 3:45 AM
thenewoil.org
#twitch extension with 30K installs exposes users’ #oauth tokens

https://www.bleepingcomputer.com/news/security/twitch-extension-with-30k-installs-exposes-users-oauth-tokens/

#cybersecurity #livestream #streaming #gaming #jeetbot #twitchenhancedviewer
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
www.bleepingcomputer.com
September 15, 2026 at 4:01 PM
hacker.at.thenote.app
Twitch extension with 30K installs exposes users’ OAuth tokens

A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
#hackernews #news
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service. [...]
www.bleepingcomputer.com
September 15, 2026 at 6:47 PM
bloom16night.bsky.social
JeetBot, as a Russian bot service, is a streamer tool. Streamers add it, for example, to voiceover chat messages. It is not (officially, at least) a bot service that is "buy viewers" type of service. It is a chat bot, functionally close to Nightbot and alike.
September 15, 2026 at 12:07 PM
bloom16night.bsky.social
Tbh though, I kinda doubt that out of 31k users of JeetBot extension, there was a significant amount of English speakers, given that description in both stores was in Russian.
September 15, 2026 at 12:14 PM
hendryadrian.bsky.social
Chrome and Firefox extension Twitch Enhanced Viewer | JeetBot, with 30K+ installs, was found sending Twitch OAuth tokens to a bot service via proxies and logging them in cleartext. #Twitch #JeetBot #OAuth
Twitch Extension With 30K Installs Exposes Users’ OAuth Tokens
A browser extension named Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, is sending Twitch OAuth session tokens to a commercial bot service through proxy servers. Socket found that the extension captures users’ authorization headers, leaks tokens in cleartext logs, and recommends removing the extension and re-authenticating Twitch sessions. #TwitchEnhancedViewer #JeetBot #Twitch
www.hendryadrian.com
September 15, 2026 at 12:45 AM
ninjaowl.ai
Twitch extension with 30K installs exposes users’ OAuth tokens #cybersecurity #hacking #news #infosec #security #technology #privacy
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
www.bleepingcomputer.com
September 15, 2026 at 1:20 PM
blackhatnews.tokyo
Twitchの拡張機能でOAuthトークンが流出、利用者3万人に影響

Socketの研究者によると、Chromeユーザー約3万人が利用しているTwitchのブラウザ拡張機能が、OAuth認証トークンを開発者が管理するインフラに送信していたことが判明しました。 この拡張機能「Twitch Enhanced Viewer | JeetBot」は、公式のChromeおよびFirefox
Twitchの拡張機能でOAuthトークンが流出、利用者3万人に影響
Socketの研究者によると、Chromeユーザー約3万人が利用しているTwitchのブラウザ拡張機能が、OAuth認証トークンを開発者が管理するインフラに送信していたことが判明しました。 この拡張機能「Twitch Enhanced Viewer | JeetBot」は、公式のChromeおよびFirefox
blackhatnews.tokyo
September 15, 2026 at 1:17 PM
bleepingcomputer.com
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
www.bleepingcomputer.com
September 14, 2026 at 7:04 PM
rwnash.bsky.social
Twitch extension with 30K installs exposes users’ OAuth tokens www.bleepingcomputer.com/news/securit...
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
www.bleepingcomputer.com
September 15, 2026 at 5:41 AM
postac001.bsky.social
「Twitch Enhanced Viewer | JeetBot」は、30Kインストールされており、ユーザーのTwitch OAuthトークンを商業ボットサービスに送信します。
Twitch extension with 30K installs exposes users’ OAuth tokens
A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users' Twitch OAuth session tokens to a commercial bot service.
www.bleepingcomputer.com
September 14, 2026 at 7:51 PM
ransomnews.online
🚨 📺 Twitch extension leaks 31,000 tokens

#JeetBot exposed OAuth tokens through operator-controlled proxies, enabling access to users’ chats, whispers and settings.

🔗 read more: securityonline.info/...

#ransomNews #cyberthreats #Twitch
September 14, 2026 at 5:37 PM
hacker.at.thenote.app
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service.

The extension, named "Twitch…
#hackernews #news
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service. The extension, named "Twitch Enhanced Viewer | JeetBot," lists HISHIMIRO/jeetbot.cc as its developer and has the following identifiers on the Google Chrome Web Store and Mozilla Firefox Add-Ons store - Chrome -
thehackernews.com
September 15, 2026 at 6:36 AM
guile.stream
Attention si jamais vous avez installé cette extension sur votre navigateur ( Twitch Enhanced Viewer | JeetBot ) elle vole les infos de session de votre connexion à Twitch.
Désinstallez l'extension et déconnectez/reconnectez vous sur Twitch sur le navigateur en question
zachbussey.tos.gg Zach Bussey 🍁 @zachbussey.tos.gg · Sep 14
A Twitch Browser Extension exposed 30,000 users' OAuth tokens to a Russian bot service.

The extension promised to block Twitch ads, force 1080p, and auto-collect channel points.

Users: Remove the Chrome/Firefox extension, then disconnect all sessions + reauthenticate.

socket.dev/blog/malicio...
September 14, 2026 at 2:09 PM
quexprpg.bsky.social
Heads-up for anyone using "Twitch Enhanced Viewer | JeetBot"
zachbussey.tos.gg Zach Bussey 🍁 @zachbussey.tos.gg · Sep 14
A Twitch Browser Extension exposed 30,000 users' OAuth tokens to a Russian bot service.

The extension promised to block Twitch ads, force 1080p, and auto-collect channel points.

Users: Remove the Chrome/Firefox extension, then disconnect all sessions + reauthenticate.

socket.dev/blog/malicio...
September 14, 2026 at 4:26 PM
thedailytechfeed.com
JeetBot Twitch extension leaked OAuth tokens from ~31,000 users—update to version 85.8.7 or disable. #Twitch #OAuth #BrowserSecurity #JeetBot #DataLeak #SecurityNews https://thedailytechfeed.com/twitch-extension-jeetbot-leaks-oauth-tokens-from-31000-accounts/
September 14, 2026 at 9:09 AM
upcastor.bsky.social
PSA for Twitch users:

Twitch Enhanced Viewer / JeetBot was found extracting the OAuth token used by Twitch’s own web client and forwarding it to infrastructure controlled by the extension operator.

If you used the extension, remove it and revoke your Twitch sessions (yes, all of them!).
September 14, 2026 at 4:58 PM
securitycyebruk.bsky.social
Malicious Twitch extension 'Twitch Enhanced Viewer | JeetBot' leaked ~31,000 users' OAuth tokens to attacker proxies — remove the extension and rotate grants now. https://cti.securitycyber.uk
September 14, 2026 at 7:01 PM