One of China’s most popular apps has the ability to spy on its users, say experts | CNN Business

The article discusses the discovery of malware in Pinduoduo, a Chinese e-commerce company. The malware was discovered by a cybersecurity firm called Dark Navy and later confirmed by other researchers. The malware allowed hackers to access users' personal data, including location information, contacts, calendars, and social network accounts.

Pinduoduo's response to the issue was to release an update that removed the exploits, but some experts believe that the underlying code could still be used to carry out attacks. The company also disbanded a team of engineers and product managers who had developed the malware.

The article highlights the failure of Chinese regulators to detect the malware, which is seen as embarrassing for the regulator. The Ministry of Industry and Information Technology has not commented on the matter, but some cybersecurity experts have questioned why they did not take action sooner.

The article also notes that Pinduoduo's growth in user base has been successful despite the regulatory clampdown on Big Tech that began in late 2020. The company's ability to evade detection and exploit vulnerabilities has raised concerns about its practices.

Overall, the article suggests that Pinduoduo's handling of the malware issue was inadequate, and that the company's lack of transparency and oversight is a concern for regulators and users alike.

Key points:

* Malware was discovered in Pinduoduo's app by Dark Navy
* The malware allowed hackers to access users' personal data
* Pinduoduo released an update that removed the exploits, but some experts believe the underlying code could still be used to carry out attacks
* The company disbanded a team of engineers and product managers who developed the malware
* Chinese regulators failed to detect the malware, raising concerns about their oversight
* Pinduoduo's growth in user base has been successful despite regulatory efforts to curb Big Tech.
 
🤔 I've been using Pinduoduo for a while now and it's always good to see these cybersecurity firms like Dark Navy keeping an eye on things... the fact that they caught this malware so early is a big deal 🙌. But you'd think with all the talk about Big Tech regulations, regulators would be doing their part too... I mean, I'm not saying they're incompetent or anything 😊. It's just weird that Pinduoduo can seem to find these vulnerabilities and fix them before anyone else even notices 🤦‍♂️. Maybe it's just a case of being in the right place at the right time? 🕰️ Either way, I'm glad they're taking steps to protect their users... it's not all bad that there are people like Dark Navy keeping an eye on these things 😊.
 
🤔 I'm tellin' ya, this whole thing reeks of a cover-up 🚫. First off, how did Dark Navy manage to discover the malware when the Chinese regulators couldn't? That just doesn't add up 💸. And what's with Pinduoduo releasing an update that removes the exploits but still leaves the underlying code out there for hackers to exploit? That's like putting a Band-Aid on a bullet wound 🏥.

And have you noticed how quiet the Ministry of Industry and Information Technology is about this whole thing? It's like they're hiding something 🔮. I mean, we all know Big Tech has been a thorn in their side for years, but this? This looks like a classic case of "we can't let them get us" 💪.

I'm not saying Pinduoduo is a malicious company per se, but come on, they need to be more transparent about how they're handling user data and security 🤝. We all want to trust our personal info with these companies, but when you see stuff like this goin' down... it's hard to shake off the feeling that somethin's fishy 🐟.

I'm gonna keep a close eye on Pinduoduo and see how they handle themselves from now on 🔒. We need more scrutiny, not less 😎.
 
OMG 🤯 just heard about this huge security breach on Pinduoduo! Their update to fix the issue is a good start, but like, what if those engineers still have access to that code? 😬 It's super concerning for users' personal info. I mean, we all know Chinese regulators aren't perfect when it comes to online safety, and now this just puts them in an even tougher spot 🤦‍♂️. On the other hand, I guess Pinduoduo's growth is a testament to how sneaky some companies can be... but at what cost? 🤑 Can't we just have transparency and security without all the cat-and-mouse games? 🐈💻
 
I'm still trying to wrap my head around this 🤯. I mean, can't these companies just be transparent for once? It's like they're hiding something under the hood (literally). And what really gets me is that Chinese regulators are all over their own behinds about not catching it sooner 💁‍♂️. I'm not saying Big Tech isn't a problem, but come on! You can't just let companies like Pinduoduo skate on this stuff 😒. It's time for some real oversight and accountability. And what's with the "disbanding" of the team that made it? Is that even a thing? Just seem like they're sweeping it under the rug 🧹.
 
🤔 I'm tellin' ya, this is just the tip of the iceberg! You think Pinduoduo's just some careless company that made a mistake? No way, bro! This is a masterclass in how not to secure your app. I mean, who needs personal data security when you can just let hackers waltz in and steal user info? 😒

And don't even get me started on the "update" they released. If it didn't fix the problem, why were they releasing an update at all? This is like saying, "Hey, we're not really fixing anything, but we'll throw you a bone to shut you up!" 🙄

I'm also wonderin' what kinda "regulatory clampdown" Big Tech's been under for the past few years. Is it just a cover story to distract us from Pinduoduo's shady dealings? 🤑
 
Back
Top