Malicious Twitch Browser Extension Compromises OAuth Tokens of Nearly 31,000 Users
Extension 'Twitch Enhanced Viewer | JeetBot' exfiltrates credentials to proxy servers linked to a Russian commercial bot service.
Key Takeaways
- A malicious browser extension 'Twitch Enhanced Viewer | JeetBot' leaked OAuth tokens from nearly 31,000 users.
- Stolen credentials were exfiltrated to proxy servers linked to a Russian commercial bot service.
- The extension was distributed on both Google Chrome Web Store and Mozilla Firefox Add-Ons store.
Related Security News
Times Car Confirms Data Breach Affecting 6.6 Million User Accounts
Times Car, a Japanese car-sharing service, has confirmed a data breach compromising approximately 6.6 million user accounts. The incident was disclosed late last week, with the exact attack vector and nature of exposed personal information yet to be fully specified. Authorities and the company are reportedly investigating the breach.
French Tax Administration Data Breach Exposed Hundreds of Thousands of Records via Stolen Staff Credentials
An unauthorized access incident at France's Direction Générale des Finances Publiques (DGPP) compromised tax data belonging to hundreds of thousands of taxpayers and businesses between June and July 2026. According to a report published by France's national cybersecurity agency ANSSI on 29 September 2026, the attacker used stolen staff passwords to gain entry. The agency stated the attack was 'not sophisticated' and went undetected for seven weeks due to weak security controls. ANSSI noted that neither the tax administration nor the agency itself observed data exfiltration, though the breach resulted in unauthorized access to sensitive fiscal information.
