The article reports on a scandal surrounding the Chinese e-commerce company Pinduoduo, which has been accused of using malware to collect users' personal data without their consent. The allegations were first raised by a Chinese cybersecurity firm called Dark Navy in February and have since been confirmed by multiple researchers.
According to the report, Pinduoduo's app was found to contain six teams of malware that could access users' locations, contacts, calendars, notifications, and social network accounts without their consent. The exploits also allowed the app to change system settings and access users' photo albums.
Despite the allegations, Pinduoduo has claimed to have removed the malware from its app after receiving a new update on March 5. However, experts say that the underlying code was still present in the app and could be reactivated to carry out attacks.
The incident highlights concerns about data protection in China, where the government's regulatory clampdown on Big Tech has been criticized for being ineffective. The Ministry of Industry and Information Technology, which is responsible for regulating tech companies, did not take any action against Pinduoduo despite receiving reports of malware in its app.
As one expert noted, "They're supposed to check Pinduoduo, and the fact that they didn't find (anything) is embarrassing for the regulator."
The incident has sparked criticism on Chinese social media, with some cybersecurity experts questioning why regulators have not taken action. A viral post on Weibo claimed that regulators cannot understand coding and programming, nor do they understand technology, making it difficult to detect malicious code.
Overall, the article highlights concerns about data protection in China and the need for more effective regulation of tech companies to protect user privacy.
According to the report, Pinduoduo's app was found to contain six teams of malware that could access users' locations, contacts, calendars, notifications, and social network accounts without their consent. The exploits also allowed the app to change system settings and access users' photo albums.
Despite the allegations, Pinduoduo has claimed to have removed the malware from its app after receiving a new update on March 5. However, experts say that the underlying code was still present in the app and could be reactivated to carry out attacks.
The incident highlights concerns about data protection in China, where the government's regulatory clampdown on Big Tech has been criticized for being ineffective. The Ministry of Industry and Information Technology, which is responsible for regulating tech companies, did not take any action against Pinduoduo despite receiving reports of malware in its app.
As one expert noted, "They're supposed to check Pinduoduo, and the fact that they didn't find (anything) is embarrassing for the regulator."
The incident has sparked criticism on Chinese social media, with some cybersecurity experts questioning why regulators have not taken action. A viral post on Weibo claimed that regulators cannot understand coding and programming, nor do they understand technology, making it difficult to detect malicious code.
Overall, the article highlights concerns about data protection in China and the need for more effective regulation of tech companies to protect user privacy.