Eye Security pushed 2 million updates to strangers' PCs to disable a vulnerable updater in abandoned Popcorn Time. Here's why it matters for your digital privacy.
Imagine waking up to find that someone you've never met has remotely updated software on your computer—without your permission. That's exactly what happened between November 2025 and March 2026, when Dutch security firm Eye Security pushed over 2 million updates to machines it didn't own.
The target? A background updater belonging to Time4Popcorn, an abandoned copy of Popcorn Time—the free app that once made streaming pirated films and TV over BitTorrent a breeze. Popcorn Time itself was shuttered years ago, but its ghost lives on in forgotten installations, quietly running outdated code that could be hijacked by anyone with malicious intent.
### Why Would Researchers Hack Strangers' Computers?
It sounds like something out of a thriller, but Eye Security's motives were purely defensive. The updater in question was a gaping security hole. Because it ran with system-level privileges and checked for updates over an unencrypted connection, an attacker could easily impersonate the update server and push malware to millions of devices. That's a botnet waiting to happen—a network of compromised computers that could be used for DDoS attacks, spam campaigns, or worse.
So, in a bold move, Eye Security took it upon themselves to send out legitimate updates that simply disabled the vulnerable updater. No data was stolen, no systems were harmed—just a silent patch for people who probably didn't even know they had the software installed.
### The Antidetect Browser Connection
If you're an antidetect browser professional, this story should raise a red flag. Many of you rely on customized browser environments to manage multiple online identities, and outdated software is a prime target for exploitation. An abandoned updater like Time4Popcorn's is exactly the kind of backdoor that could compromise your entire operation—exposing your real IP, leaking cookies, or worse.
> "The best defense against a hijacked updater is to never let it run in the first place," says Emily Davis, Head of Digital Privacy and Antidetect Browser Solutions at Antidetectbrowsershub. "That means regular audits of every application on your machines, especially those you no longer actively use."
### What This Means for Your Digital Hygiene
Here are a few takeaways to keep your systems—and your antidetect setups—safe:
- **Audit installed software regularly.** Uninstall anything you don't recognize or no longer need. That old streaming app from 2018? It's a liability.
- **Disable auto-updaters for abandoned apps.** If an app is no longer supported, its updater is a ticking time bomb. Block it at the firewall level.
- **Use isolated environments.** Antidetect browsers are great for managing profiles, but they can't protect you from OS-level vulnerabilities. Keep your host system clean.
- **Monitor outbound connections.** A sudden spike in traffic to an unknown server could mean an updater is being abused.
Eye Security's actions were controversial—some call it vigilantism—but they highlight a growing problem: abandoned software doesn't just fade away. It lingers, waiting for someone to exploit it. As someone who manages multiple digital identities, you can't afford to ignore these ghosts.
### The Bottom Line
Two million updates to strangers' computers is a startling number. It shows just how many of us are running forgotten code that could be turned against us. Stay vigilant, keep your software inventory lean, and remember: in the world of antidetect browsing, every outdated app is a potential crack in your armor.
