CERT24Dead Popcorn Time updater put millions of computers at risk of takeoverLoading data…
CERT24Threat Observatory
Period

Dead Popcorn Time updater put millions of computers at risk of takeover

Eye Security researchers disabled the update mechanism of an abandoned Popcorn Time fork and sinkholed its domains. The Time4Popcorn updater connected over HTTP to request updates and could download and execute any executable supplied by its domain with System/root privileges.

← Back to intelligence

Dead Popcorn Time updater put millions of computers at risk of takeover

Eye Security researchers disabled the update mechanism of an abandoned Popcorn Time fork and sinkholed its domains. The Time4Popcorn updater connected over HTTP to request updates and could download and execute any executable supplied by its domain with System/root privileges.