1. Basic Information

Article : Operation IXIM: Preventing a botnet of millions of Popcorn Time users

Published by : Eye Security

Date : 2026-10-22

Original : Eye Security

Related Sources : Eye Security: CVE-2026-30612 advisory , BleepingComputer

Malware : Unspecified

Threat Actor : Unspecified

CVE : CVE-2026-30612

Products : Time4Popcorn, Updater.exe , PT.updd

Severity : High

Severity Justification : Millions of remaining installations and high-privilege automatic update paths allow large-scale code execution via domain hijacking or network tampering. Because there is no vendor and no official patch, uninstallation is required.

2. Summary in One Sentence

The abandoned Time4Popcorn update feature downloads and executes files without signature verification, running as SYSTEM on Windows and root on macOS. Researchers attempted to disable updates via over two million update downloads, but this does not indicate unique device counts or the security status of all devices.

3.…