Twitch OAuth Token Abuse: Sign-In from Russian Bot Network ASN without MFA Challenge

Ankit Mehta@Secvyn

•updated Sep 14, 2026•0•0•0

This rule identifies successful user sign-ins (ResultType 0) originating from specific Autonomous System Numbers (197540, 216154) where Multi-Factor Authentication (MFA) was not required or not recorded, and where Conditional Access policies either did not apply or succeeded without enforcing MFA.