🎯 Browser Extensions

The items that name it 3

• Socket: "JeetBot" Twitch Extension Steals 31,000 Users' OAuth Tokens
  writeup2026-09-12

  Malicious/vulnerable Twitch browser extension used as the vector to capture and forward the user's live OAuth session token.

• Socket: 737 Malicious VPN/Proxy Chrome Extensions Impersonate 66 Brands
  writeup2026-08-12

  737 malicious Chrome VPN/proxy extensions used as the delivery mechanism for the campaign

• Socket: 152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Faked Google Search Traffic
  writeup2026-06-13

  152 Chrome extensions installed as browser add-ons to override new-tab pages and run background telemetry/tracking logic