Malicious Twitch extension exposed OAuth tokens of 30,000 users

A browser extension installed by more than 30,000 Twitch users was found forwarding live OAuth session tokens to proxy servers operated by Russian-language bot service JeetBot. The tokens could let anyone who possesses them act on affected Twitch accounts without the account password or two-factor authentication. Socket Threat Research Team...