The article discusses the discovery of malware in Pinduoduo's mobile app, which is a Chinese e-commerce company. The malware was found to have been developed by a team of engineers and product managers who were working for Pinduoduo.
The malware had several malicious features, including the ability to access users' locations, contacts, calendars, notifications, and photo albums without their consent. It also allowed attackers to change system settings and access users' social network accounts and chats.
Pinduoduo issued an update to its app, which removed the exploits, but some experts believe that the underlying code was still present and could be reactivated to carry out attacks.
The discovery of the malware is concerning because it violates China's data protection laws, which were introduced in 2021. The law prohibits companies from exploiting internet-related security vulnerabilities or engaging in actions that endanger cybersecurity.
Regulators in China have failed to take action against Pinduoduo despite knowing about the malware. This has led some experts to question why regulators cannot understand coding and programming, nor do they understand technology.
The incident highlights the need for greater oversight of Chinese tech companies, particularly those with large user bases like Pinduoduo. It also raises concerns about the ability of regulators to effectively monitor and enforce data protection laws in China.
Some key points from the article include:
* Pinduoduo's mobile app contains malware that can access users' sensitive information without their consent.
* The malware was developed by a team of engineers and product managers who were working for Pinduoduo.
* Pinduoduo issued an update to its app, which removed the exploits, but some experts believe that the underlying code was still present.
* China's data protection laws were introduced in 2021 and prohibit companies from exploiting internet-related security vulnerabilities or engaging in actions that endanger cybersecurity.
* Regulators in China have failed to take action against Pinduoduo despite knowing about the malware.
* The incident highlights the need for greater oversight of Chinese tech companies, particularly those with large user bases like Pinduoduo.
The malware had several malicious features, including the ability to access users' locations, contacts, calendars, notifications, and photo albums without their consent. It also allowed attackers to change system settings and access users' social network accounts and chats.
Pinduoduo issued an update to its app, which removed the exploits, but some experts believe that the underlying code was still present and could be reactivated to carry out attacks.
The discovery of the malware is concerning because it violates China's data protection laws, which were introduced in 2021. The law prohibits companies from exploiting internet-related security vulnerabilities or engaging in actions that endanger cybersecurity.
Regulators in China have failed to take action against Pinduoduo despite knowing about the malware. This has led some experts to question why regulators cannot understand coding and programming, nor do they understand technology.
The incident highlights the need for greater oversight of Chinese tech companies, particularly those with large user bases like Pinduoduo. It also raises concerns about the ability of regulators to effectively monitor and enforce data protection laws in China.
Some key points from the article include:
* Pinduoduo's mobile app contains malware that can access users' sensitive information without their consent.
* The malware was developed by a team of engineers and product managers who were working for Pinduoduo.
* Pinduoduo issued an update to its app, which removed the exploits, but some experts believe that the underlying code was still present.
* China's data protection laws were introduced in 2021 and prohibit companies from exploiting internet-related security vulnerabilities or engaging in actions that endanger cybersecurity.
* Regulators in China have failed to take action against Pinduoduo despite knowing about the malware.
* The incident highlights the need for greater oversight of Chinese tech companies, particularly those with large user bases like Pinduoduo.