A relatively popular Twitch Browser Extension exposed 30,000 users' OAuth tokens to a Russian bot service.
According to Socket's Threat Research Team, users downloaded it as it promised to block Twitch ads, force 1080p, and auto-collect channel points.
Users: Remove the extension from Chrome/Firefox, then disconnect all sessions and reauthenticate.
More details linked below.
Lo de Jade Cargill es una locura, eh. Tres movimientos seguidos que botchea. No puede ser. WWE tiene que replantearse seriamente muchas cosas. https://t.co/FnyHyyG1sJ