Resources

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,000 users to proxy servers operated by a Russian commercial bot service.

The extension, named “Twitch Enhanced Viewer | JeetBot,” lists HISHIMIRO/jeetbot.cc as its developer and has the following identifiers on the Google Chrome Web Store and Mozilla Firefox Add-Ons store –

Chrome –

Related resources

21 August 2025

Pre-Auth Exploit Chains Found in Commvault Could Enable Remote Code Execution Attacks

Commvault has released updates to address four security gaps that could be exploited to achieve remote code execution on susceptible instances. The list of vulnerabilities, identified in Commvault versions before […]

21 October 2025

Google Identifies Three New Russian Malware Families Created by COLDRIVER Hackers

A new malware attributed to the Russia-linked hacking group known as COLDRIVER has undergone numerous developmental iterations since May 2025, suggesting an increased “operations tempo” from the threat actor. The […]

5 April 2026

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Cybersecurity researchers have discovered 36 malicious packages in the npm registry that are disguised as Strapi CMS plugins but come with different payloads to facilitate Redis and PostgreSQL exploitation, deploy […]

ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th)

Upcoming Speaking Engagements

Resources

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

Related resources

Pre-Auth Exploit Chains Found in Commvault Could Enable Remote Code Execution Attacks

Google Identifies Three New Russian Malware Families Created by COLDRIVER Hackers

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Links

Enterprise Solutions

SMB Solutions

Contact Us

Follow Us