The article discusses the discovery of malware in Pinduoduo's shopping app, which was able to access users' sensitive information without their consent. The malware was found by a team of cybersecurity experts, including Sergey Toshin of Oversecured, who used various methods to identify and exploit vulnerabilities in the app.
According to the article, Pinduoduo issued an update to remove the malware from its app on March 5, but the underlying code was still present, and it is likely that the company could re activate it to carry out attacks. The team that developed the malware was disbanded after their actions were discovered, with some members being transferred to other departments within the company.
The article also highlights the lack of oversight from regulatory bodies in China, particularly the Ministry of Industry and Information Technology. Despite being responsible for regulating companies like Pinduoduo, the ministry failed to detect the malware, which is embarrassing for the regulator. The cybersecurity expert quoted in the article notes that regulators often struggle to understand coding and programming concepts, making it difficult for them to effectively regulate companies.
The discovery of the malware has raised concerns about data privacy and security in China's tech industry. Cybersecurity experts are warning that more needs to be done to protect users' sensitive information from companies like Pinduoduo. The article concludes by noting that CNN has reached out to regulatory bodies for comment, but no official response has been received.
Key points:
* Malware was found in Pinduoduo's shopping app, which could access users' sensitive information without their consent.
* The malware was discovered by a team of cybersecurity experts, including Sergey Toshin of Oversecured.
* Pinduoduo issued an update to remove the malware on March 5, but the underlying code is still present.
* The company disbanded its malware development team and transferred some members to other departments.
* Regulatory bodies in China failed to detect the malware, leading to concerns about data privacy and security.
* Cybersecurity experts warn that more needs to be done to protect users' sensitive information from companies like Pinduoduo.
According to the article, Pinduoduo issued an update to remove the malware from its app on March 5, but the underlying code was still present, and it is likely that the company could re activate it to carry out attacks. The team that developed the malware was disbanded after their actions were discovered, with some members being transferred to other departments within the company.
The article also highlights the lack of oversight from regulatory bodies in China, particularly the Ministry of Industry and Information Technology. Despite being responsible for regulating companies like Pinduoduo, the ministry failed to detect the malware, which is embarrassing for the regulator. The cybersecurity expert quoted in the article notes that regulators often struggle to understand coding and programming concepts, making it difficult for them to effectively regulate companies.
The discovery of the malware has raised concerns about data privacy and security in China's tech industry. Cybersecurity experts are warning that more needs to be done to protect users' sensitive information from companies like Pinduoduo. The article concludes by noting that CNN has reached out to regulatory bodies for comment, but no official response has been received.
Key points:
* Malware was found in Pinduoduo's shopping app, which could access users' sensitive information without their consent.
* The malware was discovered by a team of cybersecurity experts, including Sergey Toshin of Oversecured.
* Pinduoduo issued an update to remove the malware on March 5, but the underlying code is still present.
* The company disbanded its malware development team and transferred some members to other departments.
* Regulatory bodies in China failed to detect the malware, leading to concerns about data privacy and security.
* Cybersecurity experts warn that more needs to be done to protect users' sensitive information from companies like Pinduoduo.
And it's not even like they did anything wrong, the company just needs to be more careful with updates and stuff. But for real, how do regulatory bodies not notice these kinds of things? 
It sounds like they need some training or something. I mean, cybersecurity is super complex, you can't expect them to know everything about it right off the bat. And now that the malware team got busted, I'm worried they're gonna bring it back... no thanks! 
it's so scary to think that our personal info was being accessed without our consent 
. i mean, it's not rocket science or anything, cybersecurity experts can actually understand code! 
it's just a matter of having the right people in place to monitor companies like Pinduoduo.
but we need more than just one incident to happen before something is done about it 
. cybersecurity experts are warning us, we need to listen! 
let's keep an eye on these companies and make sure they're taking our data protection seriously 
cybersec experts are hella worried about this too 
cuz they clearly failed to do so 
. anywayz, lets just keep an eye on pinduoduo and hope they stay on the right track 
I mean I love green tea as much as the next person but have you tried them? They're literally so good! 
I was at the store last week and they were all out, like what's going on?! Did everyone just want to try the matcha Kit Kat too? 
Anyway, back to Pinduoduo... it's crazy that their app had malware in the first place. Like, how did they even let that happen? 
seriously though, this is super sketchy. i mean, i'm no cybersecurity expert but come on, how hard is it to detect that kind of stuff? regulatory bodies gotta step up their game or are they just gonna sit back and let companies like Pinduoduo walk all over them? also, great job by the team who discovered the malware, btw 
. guess this means we're in for a long night of reading about more tech scandals 
and its not just that the fact that the company was able to re activate the code makes me wanna scream 
the chinese regualtions need to step up their game ASAP 
and btw why did it take so long for them to detect the malware?? wasnt there anyone watching?? 
.
. It's like they're playing a game of cybersecurity whack-a-mole - you fix one hole, they just dig another one up. We need more oversight and accountability from regulatory bodies ASAP 
. Anything less is just not good enough 
And it's not just them, regulatory bodies in China are supposed to be keeping an eye on these companies but they seem to be clueless too 
. This is why we can't trust anyone online, especially not in China 
.
. It's like users' personal info is just an afterthought for these companies 
. Anyway, I'm glad some cybersecurity experts are sounding the alarm about this - maybe it'll get people's attention and something will actually be done to improve data security in China 
. But until then, I'll just be over here, shaking my head 
they're lucky the team of cybersecurity experts found it before it caused any major damage but honestly how did they let this happen? 
and it's not just them, this is a bigger issue for china's tech industry as a whole 
. We need to start talking about data privacy and security in China's tech industry and make sure we're not putting our personal info at risk every time we use these apps. I'm calling for more transparency and accountability from companies like Pinduoduo, and stricter regulations on regulatory bodies too 
! We can't just sit back and let this happen - we need to take action 
, where a villainous company hacks into people's personal info without them even knowing 
. I mean, what's going on with regulatory bodies in China? They're supposed to be watching out for these kinds of things, but apparently they can't even keep up 
. Anyway, it's super important that companies like Pinduoduo take responsibility for their actions and prioritize user security 
.
. Users' info is at risk 
.
.
. still, it's gotta be really frustrating for all the users who did get affected