 (2).png){kind=logo}
1 hour ago
1
Security steadfast Eye Research has detailed however Time4Popcorn – an unofficial mentation of the once-popular movie streaming app – near down a tiny update checker that scanned for updates each clip the Mac started, adjacent for radical who hadn't opened the app successful years. The checker fundamentally trusted immoderate it downloaded, and gave it afloat support to alteration thing connected the Mac.
What's worse is that Time4Popcorn's developers agelong abandoned the project, truthful the website addresses the helper contacted were expiring. That meant anyone who took implicit 1 of the addresses could usage it to instal harmful bundle connected affected machines. Fortunately, Eye Research says it recovered nary grounds that criminals had done so.
Eye Research said it took power of an abandoned code utilized by the update checker, and it estimates that 250,000 to 350,000 Macs were affected. With nary developer near to contented a fix, the researchers had to usage the checker itself to disable it connected much than a cardinal Macs and Windows PCs. It past handed the addresses to the Shadowserver Foundation, a nonprofit cybersecurity group.
Even so, this hole doesn't code different vulnerabilities successful Time4Popcorn, and immoderate updated addresses stay extracurricular the researchers' control. For that reason, if you're inactive moving that version, the researchers' proposal is simple: uninstall it. Time4Popcorn was 1 of respective unofficial versions of Popcorn Time, and it was really distributed nether the Popcorn Time name, truthful users whitethorn not cognize whether the transcript they installed is the affected one. For each the details, cheque retired the Eye Research report.
This article, "Old 'Popcorn Time' App Left Hundreds of Thousands of Macs astatine Risk" archetypal appeared connected MacRumors.com
Discuss this article successful our forums
English (US) ·