安全研究机构Eye Security发现，曾用于流媒体盗版的应用Popcorn Time的一个分叉版本"Time4Popcorn"仍在全球数百万台Windows、macOS和Android设备上持续运行1。这些已被开发者弃用多年的应用实例构成了严重的网络安全威胁。
该应用的更新程序通过未加密的HTTP连接与已废弃的域名进行通信，同时采用了过时且不安全的Chrome版本1。这些漏洞使得这些设备极易被黑客利用，进而被征用组建僵尸网络进行恶意活动1。为防止此类风险扩大，相关方采取了禁用这些废弃应用的措施。
Security researchers at Eye Security discovered that millions of Windows, macOS, and Android devices worldwide were still running abandoned versions of the piracy streaming application Popcorn Time, specifically a fork known as Time4Popcorn.1 The outdated software posed a significant security threat, as its updater communicated with defunct domains through unencrypted HTTP connections and relied on an obsolete and insecure version of Chrome.1 These vulnerabilities created a serious risk that the dormant application could be repurposed and conscripted into a botnet.1
Popcorn Time, which had been used during the 2010s to stream pirated content, had long since been abandoned by its developers, yet copies of the Time4Popcorn variant remained active on millions of devices globally.1 The combination of insecure communication protocols and outdated software components left these systems exposed to unauthorized control and malicious activity.1
评论
还没有评论，欢迎留下第一条。