The Zombie in the Spare Bedroom: Why Your Old Tech Needs a Holiday Audit
The Zombie in the Spare Bedroom: Why Your Old Tech Needs a Holiday Audit
By Team Gimmie
Updated October 24, 2026
The Zombie in the Spare Bedroom: Why Your Old Tech Needs a Holiday Audit
Somewhere in your house—maybe tucked in the back of a desk drawer or gathering dust on a guest room nightstand—there is a digital sleeper agent waiting for orders. We often think of cyber threats as something that happens to us while we are actively browsing the web, but one of the most significant risks today comes from the apps we have completely forgotten about.
The latest ghost to haunt our hard drives is Popcorn Time. A decade ago, it was the darling of the piracy world, an app that made streaming torrents as easy as using Netflix. While the original creators have long since moved on, a recent investigation by security researchers at Eye Security reveals that millions of devices are still running abandoned versions of the software. These apps are not just sitting idle; they are actively phoning home to dead domains using unencrypted connections.
This isn't just about a piracy app that doesn't work anymore. It is about a massive, dormant network that could be turned into a botnet—a zombie army—overnight.
The Ghost in the Machine
The specific culprit is a fork of the software called Time4Popcorn. Researchers found that the updaters for this version are still running on Windows, macOS, and Android devices globally. These updaters are trying to reach out to old web domains to check for instructions. Because these connections are unencrypted (using old-school HTTP), a malicious actor who takes control of those abandoned domains could send commands directly to your computer.
Worse yet, these apps often run on an ancient, highly insecure version of Chrome that hasn't seen a security patch in years. This combination is essentially a wide-open back door. If a hacker decides to wake up this sleeping army, they could use your laptop to launch DDoS attacks, spread ransomware, or steal your personal data without you ever clicking a link.
The Hand-Me-Down Trap
This discovery is particularly relevant as we approach the holiday season. Many of us treat the holidays as a time for a tech upgrade, which often leads to a cycle of hand-me-downs. We give our three-year-old laptop to a college-bound niece or pass an old tablet down to a toddler so they can watch cartoons.
