When managed security service provider Eye Security spotted an odd update process in a client's telemetry that appeared to be reaching out to outdated — and in some cases, malicious — domains, the company decided to take a deeper look. The updater belonged to a modified version of Time4Popcorn, a 2014-era BitTorrent client that allows movies to be downloaded from the Internet, and even after a decade, the persistent updater continued to run on more than 2.5 million Windows machines and an estimated 300,000 Macs, checking for new software, according to the MSSP's advisory.
security —
Undead Software Projects Continue to Raise Security Risks
A security firm patched a decade-old app to prevent the takeover of millions of machines, highlighting that abandoned domains remain a boon to attackers.
Reported by darkreading.com.
