SecurityOct 26Eye Security registered Popcorn Time's abandoned update domain, found millions of machines ready to run anything it sent, and pushed one update that only switched the updater off
