Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service
socket.dev
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.

cross-posted from: https://piefed.world/c/tech/p/1400813/popular-twitch-ad-blocker-caught-sending-live-account-credentials-to-russian-proxies

Threat Research Team identified a cross-store browser extension, “Twitch Enhanced Viewer | JeetBot,” that forwards each user’s live Twitch OAuth session token to proxy servers operated by a Russian commercial bot service. The extension ships on both the Chrome Web Store (extension ID pnhhdhhcadcjfckjhpmjneldiegbojfb, 30,000 users) and Firefox Add-ons (twitchenhancedviewer@example.com, 552 users). Both listings are live at time of writing.

  • M137@lemmy.todayEnglish
    53·
    2 days ago

    Sorry but I really think it’s AI. The only time I played around with AI of any kind was to see how it’d handle pixelart and it looked very similar to this. It’s good at a very quick glance but quickly falls apart (like a lot of AI things) as soon as you actually look at it.

    I don’t see how a human could mess it up that oddly and badly. It would take more effort to make it this bad than just make actual pixel art, there are so many small things that make no sense as errors or sloppy/lazy human art.

    • pulsewidth@lemmy.worldEnglish
      1·
      1 day ago

      What’s wrong and bad about it, in your opinion? I’m no pixel art expert, but it sounds like you may be?

      • OccasionallyFeralya@lemmy.mlEnglish
        1·
        1 day ago

        I can’t speak to the pixel are but the website itself also looks ai generated (as in the design not necessarily the writing). Also its homepage advertises its services as ai powered.

        • pulsewidth@lemmy.worldEnglish
          1·
          17 hours ago

          Yeah, I had a peek too. It might be ai, but I haven’t seen any actual evidence of it - they use this pixel art style on a lot of their posts and it seems consistently decent.

          Looking at their company photo they’re very well funded and also have a team of like 60 people, so there’s no reason they couldn’t have an in-house graphics artist or a freelancer they contract. Or it could be ai.

          But in times where every modern graphics artists is being accused of being AI, I’m inclined to assume not rather than assume it is, without evidence to the contrary.