Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

1 IOC

CVE-2026-30612: A vulnerability in Time4Popcorn (PopcornTime)

Eye Security

Published June 11, 2026Original Report

Excerpt

Time4Popcorn is a fork of Popcorn Time , a popular download application. This fork is also distributed under the name ‘Popcorn Time’. Since early 2025, a new project started using the PopCorn Time name and is building a legal alternative, this research does not apply to that software. The Windows, Mac and Android versions of this software, contain a vulnerable update component. The updater connects to its update servers over an insecure channel. An attacker that…

Read the original report →

Attack Flow4 steps · MITRE ATT&CK mapped

Initial AccessTA0001T1190

1/4

Exploit Public-Facing Application

ActionManipulate update traffic

An attacker manipulates traffic to an insecure update channel to deliver a malicious update.

Indicators of Compromise

Open the mindmap →

1 indicators

Type	Indicator	Confidence	Score	First Seen
CVE	CVE-2026-30612	Medium	Score 53/100	First seen Jun 11, 2026

IOC Relationship Graph

Building graph…