Time4Popcorn, an unofficial version of Popcorn Time, which was once widespread among pirate movie streaming applications, has come to the fore years later due to a security risk for Mac users. According to an investigation by the security firm Eye Research, some components of the application can continue to run on devices even though the software is no longer actively developed.
The research stated that Time4Popcorn has a mechanism that checks for updates every time the computer is turned on. The fact that it can make changes to the system by trusting the data downloaded by this mechanism creates a serious vulnerability, especially when it comes to software that has been abandoned by its developers.
HOW DID THE RISK EMERGE?
According to Eye Research, the problem became even more critical as some of the web addresses the application connects to for update checks expired. If such addresses are seized by malicious actors, it could be possible to send malware to the affected devices.
The security firm stated that it tested the scale of the risk by taking control of one of these addresses. The company also emphasized that it has not yet found any evidence that cybercriminals have exploited this vulnerability to infiltrate devices.
According to the researchers' estimates, between 250,000 and 350,000 Mac devices may have been affected by this security issue. In addition, it was stated that the Eye Research team used the update controller to disable the relevant mechanism on more than one million Mac and Windows computers.
Later, control of the relevant addresses was transferred to the non-profit cybersecurity organization Shadowserver Foundation. However, it was stated that the intervention did not eliminate all security vulnerabilities within Time4Popcorn, and some updated addresses remained outside the control of the researchers.
Experts recommend that users who have installed Popcorn Time or Time4Popcorn in the past check their devices for the application and residual files. If the risky version is kept on the computer, it is advised to remove the software completely.
The fact that different unofficial versions have been distributed under the name Popcorn Time can make it difficult for users to understand which copy they have installed. For this reason, it is recommended that especially old Mac users review their application folders, startup items, and any files that may have remained in the system.
News Source: 12punto
