Toshin found Pinduoduo to have exploited about 50 Android system vulnerabilities. Most phone manufacturers globally customise the core Android software, the Android Open Source Project (AOSP), to add unique features and applications to their own devices. “I’ve never seen anything like this before. Toshin described Pinduoduo as “the most dangerous malware” ever found among mainstream apps. Sergey Toshin, the founder of Oversecured, said Pinduoduo’s malware specifically targeted different Android-based operating systems, including those used by Samsung, Huawei, Xiaomi and Oppo.ĬNN has reached out to these companies for comment. Apple (AAPL)’s iPhone has 25 per cent market share, according to Daniel Ives of Wedbush Securities. In China, about three quarters of smartphone users are on the Android system. “Such a technique is widely used by malware developers that inject malicious code into applications that have legitimate functionality,” they said. They also identified in some plug-ins the intent to obscure potentially malicious components by hiding them under legitimate file names, such as Google’s. The app deployed a method that allowed it to push updates without an app store review process meant to detect malicious applications, the researchers said. Pinduoduo has previously rejected “the speculation and accusation that Pinduoduo app is malicious.”ĬNN has contacted PDD multiple times over email and phone for comment, but has not received a response. The findings follow Google’s suspension of Pinduoduo from its Play Store in March, citing malware identified in versions of the app.Īn ensuing report from Bloomberg said a Russian cybersecurity firm had also identified potential malware in the app. But as Beijing enjoys significant leverage over businesses under its jurisdiction, there are concerns from US lawmakers that any company operating in China could be forced to co-operate with a broad range of security activities. There is no evidence that Pinduoduo has handed data to the Chinese government. While Temu has not been implicated, Pinduoduo’s alleged actions risk casting a shadow over its sister app’s global expansion. Both are owned by Nasdaq-listed PDD, a multinational company with roots in China. The revelations are also likely to draw more attention to Pinduoduo’s international sister app, Temu, which is topping US download charts and fast expanding in other Western markets. Some American lawmakers are pushing for a national ban on the popular short-video app, whose CEO Shou Chew was grilled by Congress for five hours last week about its relations with the Chinese government. Malware, short for malicious software, refers to any software developed to steal data or interfere with computer systems and mobile devices.Įvidence of sophisticated malware in the Pinduoduo app comes amid intense scrutiny of Chinese-developed apps such as TikTok over concerns about data security. “This is highly unusual, and it is pretty damning for Pinduoduo.” “We haven’t seen a mainstream app like this trying to escalate their privileges to gain access to things that they’re not supposed to gain access to,” Finnish cybersecurity firm WithSecure chief research officer Mikko Hyppönen said. Credit: CFOTO/Future Publishing/Getty Images Cybersecurity experts have identified the presence of malware on Pinduoduo, China’s popular shopping app. Company insiders said the exploits were utilised to spy on users and competitors, allegedly to boost sales. Multiple experts identified the presence of malware on the Pinduoduo app that exploited vulnerabilities in Android operating systems. In a detailed investigation, CNN spoke to half a dozen cybersecurity teams from Asia, Europe and the United States - as well as multiple former and current Pinduoduo employees - after receiving a tip off. While many apps collect vast troves of user data, sometimes without explicit consent, experts say e-commerce giant Pinduoduo has taken violations of privacy and data security to the next level. Watch the latest News on Channel 7 or stream for free on 7plus >
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |