Key Takeaways
- Eye Security researchers found Popcorn Time and its forks still active on millions of devices.
- These apps were found to be sending data over unencrypted HTTP to now-abandoned web domains.
- Disabling the apps was necessary to prevent them from joining a potential botnet.
Researchers at Eye Security have uncovered a significant security risk associated with the Popcorn Time application and its forks, which are still installed on millions of devices worldwide. The apps, once a popular tool for accessing pirated content, are now being used to create a potential botnet, a network of compromised devices under the control of cybercriminals.
According to Niels Teus, a researcher at Eye Security, the updater for a Popcorn Time fork called 'Time4Popcorn' was still active on a large number of Windows, macOS, and Android devices. These devices were sending data over unencrypted HTTP to now-abandoned web domains, indicating a potential security vulnerability.
The researchers noted that the apps were running an outdated and insecure version of Chrome, which further increased the risk of exploitation. This discovery highlights the ongoing threat posed by abandoned applications that continue to run on users' devices, even after their development has ceased.
To mitigate this risk, Eye Security recommended disabling the Popcorn Time and Time4Popcorn apps on affected devices. This action was necessary to prevent the apps from joining a potential botnet, which could be used for various malicious activities, including DDoS attacks and data theft.
The findings underscore the importance of regularly updating software and removing unused applications to maintain device security. Users are advised to check their devices for any lingering instances of Popcorn Time or its forks and take appropriate action to remove them.
While the development of Popcorn Time has been abandoned for years, the continued presence of these applications on millions of devices poses a significant security risk. The researchers emphasized the need for users to stay vigilant and take proactive steps to secure their devices against potential threats.
The researchers also highlighted the broader implications of this discovery, noting that similar issues could exist with other abandoned applications. This situation serves as a reminder of the ongoing need for cybersecurity awareness and the importance of maintaining a secure digital environment.
