The article discusses the discovery of malware in Pinduoduo's mobile app, which was developed by a team of engineers and product managers. The malware allowed the company to access users' locations, contacts, calendars, notifications, and photo albums without their consent, as well as change system settings and access social network accounts and chats.
The article highlights that Pinduoduo did not appear on any lists of apps removed from app stores for failing to comply with regulations, despite being a large company. The Ministry of Industry and Information Technology and the Cyberspace Administration of China have been criticized for their oversight in not detecting the malware.
The article also notes that Pinduoduo was able to grow its user base despite regulatory clampdowns on Big Tech in China. The company's apparent failure to comply with data protection regulations is seen as embarrassing for regulators, who are supposed to check companies like Pinduoduo.
In response to the discovery of the malware, Pinduoduo issued an update that removed the exploits, and the company disbanded the team responsible for developing them. However, some cybersecurity experts have questioned why regulators did not take action against the company sooner.
The article raises concerns about the lack of oversight and enforcement of data protection regulations in China, particularly with regards to Big Tech companies. It highlights the need for greater transparency and accountability from regulators and companies alike to protect users' rights and prevent malicious activities like the one discovered in Pinduoduo's app.
The article highlights that Pinduoduo did not appear on any lists of apps removed from app stores for failing to comply with regulations, despite being a large company. The Ministry of Industry and Information Technology and the Cyberspace Administration of China have been criticized for their oversight in not detecting the malware.
The article also notes that Pinduoduo was able to grow its user base despite regulatory clampdowns on Big Tech in China. The company's apparent failure to comply with data protection regulations is seen as embarrassing for regulators, who are supposed to check companies like Pinduoduo.
In response to the discovery of the malware, Pinduoduo issued an update that removed the exploits, and the company disbanded the team responsible for developing them. However, some cybersecurity experts have questioned why regulators did not take action against the company sooner.
The article raises concerns about the lack of oversight and enforcement of data protection regulations in China, particularly with regards to Big Tech companies. It highlights the need for greater transparency and accountability from regulators and companies alike to protect users' rights and prevent malicious activities like the one discovered in Pinduoduo's app.