Abandoned Popcorn Time apps had to be disabled to prevent a zombie army

Tech Entertainment News Abandoned Popcorn Time apps had to be disabled to prevent a zombie army What old and vulnerable software might be running on your PC right now?

What old and vulnerable software might be running on your PC right now?

Stevie Bonifield Oct 23, 2026, 7:35 PM UTC Link Share Gift Image: Popcorn Time Part Of Popcorn Time: the ‘Netflix for piracy’ that refuses to die see all updates Stevie Bonifield is a news writer covering all things consumer tech. Stevie started out at Laptop Mag writing news and reviews on hardware, gaming, and AI. Remember Popcorn Time , the app that served as an easy-to-use front end for streaming torrents of movies and TV shows? Development of the MPAA’s least-favorite app of the 2010s has been abandoned for years , but the “Netflix of Piracy” software is still installed on millions of devices that are just waiting to join a bot army. Researchers at Eye Security found the updater for a Popcorn Time fork called “Time4Popcorn” still running on tons of Windows, macOS, and Android devices located around the world, phoning home to now-abandoned web domains over unencrypted HTTP and running an outdated, insecure version of Chrome.

Eye Security’s Niels Teusink says the updater could have been used to install and run basically any kind of software with full privileges, easily enabling someone to create a botnet just by taking over one of the domains, using a man-in-the-middle attack to target specific devices, or perform surveillance by identifying the machines running the software.

Their solution was to register one of the domains and use it to send their own update that instructed the updater to disable itself. Despite ethical concerns about the fix, the researchers say their only alternative “was to do nothing,” pointing out, “The update process wasn’t doing anything functional anyway, it was only creating risk for users.”

Eye Security said on Windows devices, their update “simply stops and disables the service via the Service Control Manager” without deleting any files or anything else. On macOS, it uses a shell script to execute a command that blocks the update process from starting. They didn’t address the software on Android devices, where installing the update would still require actual user interaction first.

They had to tweak their update after it was uploaded to VirusTotal, causing security programs to flag it as malware and block it while leaving the vulnerable updater running. It’s unclear exactly how many devices were at risk, but Eye Security says it “sent out over 2 million update downloads” by March, when they stopped sending the update and transferred the domains they used to the Shadowserver Foundation , a web security non-profit.

Stevie Bonifield Entertainment News Security Streaming Tech More in: Popcorn Time: the ‘Netflix for piracy’ that refuses to die Popcorn Time’s best-known app comes back to life Adi Robertson Feb 26, 2016 The Pirate Bay now lets you stream torrents from your browser James Vincent Feb 8, 2016 The most popular Popcorn Time fork has been shut down James Vincent Oct 26, 2015 Most Popular Most Popular Tesla driver using Full Self-Driving struck and killed a man crossing I-80 Now Google says it might use your Gmail and Google Photos data to target ads Trump says Sundar Pichai talked him out of renaming the Atlantic Ocean The first broken iPhone Duos are here The iPhone Duo is a messy, expensive, good time Advertiser Content From This is the title for the native ad

Fuente: The Verge