cross-posted from: https://piefed.world/c/tech/p/1400813/popular-twitch-ad-blocker-caught-sending-live-account-credentials-to-russian-proxies
Threat Research Team identified a cross-store browser extension, “Twitch Enhanced Viewer | JeetBot,” that forwards each user’s live Twitch OAuth session token to proxy servers operated by a Russian commercial bot service. The extension ships on both the Chrome Web Store (extension ID pnhhdhhcadcjfckjhpmjneldiegbojfb, 30,000 users) and Firefox Add-ons (twitchenhancedviewer@example.com, 552 users). Both listings are live at time of writing.
Uhh… Its the icon for a browser plugin… To illustrate that it was a Twitch browser plugin.
Yeah but you see, it’s a pixel art, it should not be there and should be bigger, to match the pixel grid, this image has a ton of pixel not matching a grid and mixel (mixel can be an artistic choice but here they were clearly abused, i can give it the benefit of the doubt but that icon is too sus…)
You sound like you know your pixel art so I’m gonna take your word for it that this is sus. Appreciate the explanation.