{"id":51295,"date":"2023-04-02T23:01:04","date_gmt":"2023-04-02T23:01:04","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/34486\/Pinduoduo-Is-Straight-Up-Malware.html"},"modified":"2023-04-02T23:01:04","modified_gmt":"2023-04-02T23:01:04","slug":"pinduoduo-is-straight-up-malware","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/pinduoduo-is-straight-up-malware\/","title":{"rendered":"Pinduoduo Is Straight Up Malware"},"content":{"rendered":"
<\/span> CNN<\/span>  \u2014  <\/cite>\n<\/div>\n

It is one of China\u2019s most popular shopping apps, selling clothing, groceries and just about everything else under the sun to more than 750 million users a month. <\/p>\n

But according to cybersecurity researchers, it can also bypass users\u2019 cell phone security to monitor activities on other apps, check notifications, read private messages and change settings. <\/p>\n

And once installed, it\u2019s tough to remove. <\/p>\n

While many apps collect vast troves of user data, sometimes without explicit consent, experts say e-commerce giant Pinduoduo <\/strong>has taken violations of privacy and data security to the next level. <\/p>\n

In a detailed investigation, CNN spoke to half a dozen cybersecurity teams from Asia, Europe and the United States \u2014 as well as multiple former and current Pinduoduo employees \u2014 after receiving a tipoff. <\/p>\n

Multiple experts identified the presence of malware on the Pinduoduo app that exploited vulnerabilities in Android operating systems. Company insiders said the exploits were utilized to spy on users and competitors, allegedly to boost sales. <\/p>\n

\u201cWe haven\u2019t seen a mainstream app like this trying to escalate their privileges to gain access to things that they\u2019re not supposed to gain access to,\u201d said Mikko Hypp\u00f6nen, chief research officer at WithSecure, a Finnish cybersecurity firm. <\/p>\n

\u201cThis is highly unusual, and it is pretty damning for Pinduoduo.\u201d <\/p>\n