• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    JeetBot Twitch Enhanced Viewer Malicious Extension Installed

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    Arnold Chan@slaz
    •updated Sep 14, 2026•0•0•2

    This rule identifies browser extensions installed on devices that are either explicitly known as malicious or exhibit suspicious naming patterns potentially associated with unauthorized or malicious extensions.

    Microsoft Sentinel (KQL)

    Tags

    T1176 - Browser ExtensionsTA0003 - PersistenceApplication EventWindowsWindows Defender Atpkql

    Found in

    • JeetBot Twitch Extension Steals OAuth TokensLast updated Sep 14, 2026
    • JeetBot Twitch Extension Steals OAuth TokensLast updated Sep 14, 2026
    • JeetBot Twitch Extension Steals OAuth TokensLast updated Sep 14, 2026
    • JeetBot Twitch Extension Steals OAuth TokensLast updated Sep 14, 2026
    • JeetBot Twitch Extension Steals OAuth TokensLast updated Sep 14, 2026

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?