#ParsedReport #CompletenessHigh
11-09-2026

Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service

https://socket.dev/blog/malicious-twitch-browser-extension

Report completeness: High

Threats:
Jeetbot
Aitm_technique

Victims:
Twitch users

Industry:
E-commerce

Geo:
Germany, Russian

TTPs:
Tactics: 2
Technics: 4

IOCs:
BrowserExtension: 1
Email: 3
Domain: 11
File: 4
Url: 18
IP: 3
Hash: 2

Soft:
Chrome, Firefox

Algorithms:
sha256

Functions:
getProxyModeParam, getProxySetTokenUrl