TECHNOLOGY · VERIFIED DEVELOPMENT
Popcorn Time Apps Still Running, Pose Botnet Risk
WHY IT MATTERS
The inactive Popcorn Time software can be hijacked into a botnet, exposing millions of devices to malicious use and compromising user security.
What happened
Popcorn Time, the torrent‑streaming app that once drew the MPAA’s ire, has been abandoned for years, yet millions of Windows, macOS and Android devices still carry it. Eye Security researchers discovered that the updater for a fork called Time4Popcorn remains active on these systems, reaching out to defunct web domains over unencrypted HTTP and relying on an outdated, insecure version of Chrome.
The software’s continued operation could allow attackers to co‑opt the devices into a bot army. The study urges users and administrators to disable the app immediately to prevent exploitation.
The finding highlights how dormant, unmaintained applications can become a vector for large‑scale cyber‑attacks, endangering both individual users and broader network security.
PRIMARY SOURCES
Abandoned Popcorn Time apps had to be disabled to prevent a zombie army
The Verge · Stevie Bonifield · Discovery only; Vox Media copyright terms apply