One of China’s most popular apps has the ability to spy on its users, say experts | CNN Business

The article discusses the discovery of malware in Pinduoduo's mobile shopping app, which has raised concerns about the company's handling of user data and its compliance with Chinese regulations.

**Malware Discovery**

In late February, a cybersecurity firm called Dark Navy discovered malicious code in Pinduoduo's app that allowed it to access users' personal data without their consent. The malware was designed to exploit vulnerabilities in the operating system and collect sensitive information such as location, contacts, calendars, notifications, and photo albums.

**Regulatory Failure**

The discovery of the malware has raised questions about the Chinese government's regulatory oversight and enforcement of cybersecurity laws. Pinduoduo did not appear on any of the lists published by the Ministry of Industry and Information Technology or the Cyberspace Administration of China, which typically include apps that have been flagged for violating regulations.

**Expert Opinions**

Tech policy experts have expressed disappointment with the government's handling of the situation, stating that it is embarrassing for the regulator to not have detected such a serious violation. One expert noted that the regulators "can't even understand coding and programming" and therefore are unable to effectively enforce cybersecurity laws.

**Consequences**

The discovery of the malware has led to several consequences, including:

* Pinduoduo's team of engineers and product managers who developed the malware were disbanded.
* The company removed the exploits from its app in a new update.
* Several cybersecurity experts have questioned why regulators haven't taken action against Pinduoduo.

**Social Media Discussion**

The discovery of the malware has sparked a heated discussion on Chinese social media, with some experts and users expressing concern about the government's lack of oversight and enforcement. The post was censored by Weibo, a Twitter-like platform, the next day.

Overall, the article highlights the need for greater regulatory oversight and enforcement of cybersecurity laws in China, particularly in cases where companies are found to be violating regulations.
 
I gotta say, it's pretty shocking that Pinduoduo got away with this malware thingy without anyone noticing 🤯... I mean, we've all heard about how the Chinese government is super strict on cyber security laws and stuff, but apparently it didn't apply to Pinduoduo 🙄. It's like they were playing a game of cat and mouse with users' personal info 💻. Anyways, it's good that the company took steps to fix the issue and remove the malware from their app 🚫... but what about those engineers who created it in the first place? Shouldn't they be held accountable too? 🤔
 
🤔

ok so pinduoduo got caught red handed with malware 🚫👀 they didnt even try to hide it from the regulators or anyone else ... i mean its not like its hard to find 🙄 and yet they just winged it 💥 until some cybersecurity firm finally found out

anyway i think this is a super bad look for china's regulatory body 👎 especially when you consider how many other companies are probably doing the same thing 🤷‍♀️ in the shadows ... its like theyre not even trying to keep up with tech advancements 🚀

i mean think about it if pinduoduo can do this then what else is out there 🤔 and we all know china has a huge tech industry 🌆 so this is a major concern 💸
 
aww man that's so worrying 🤕 it's like they're playing with people's personal info like it's no big deal... I mean what's up with the regulators not being able to catch this? 🙄 it sounds like they need some training or something on how to actually enforce laws 😅 and now pinduoduo is dealing with the fallout 🤦‍♀️ hopefully they'll do better in the future 💪
 
🤔 This whole thing is like, super concerning, fam... I mean, think about it - our data's literally being exploited by these big corps without our consent 🤑. It's like, we're living in a surveillance state, but instead of Big Brother, it's like Big Data 👀.

And what really gets my goat is that Pinduoduo didn't even get flagged by the regulators 🤷‍♂️. Like, how are they supposed to enforce these laws if they can't even catch companies in the act? It's just more proof that our regulatory system needs a major overhaul 🔧.

And don't even get me started on the engineers and product managers who were involved - they're basically getting away with murder 💀... I mean, without consequences. We need to hold these people accountable and make sure they face the music 🎶.

It's all about who gets to decide what our data is worth 🤑. Are we a consumerist society or do we value our online security? It's time for us to take a stand and demand better 🗣️.
 
Ugh, can't believe I'm having to write about this... The fact that Dark Navy managed to find malware in Pinduoduo's app is just another example of how easily these things can slip through the cracks 🤦‍♂️. And now everyone's making a big deal about it because it was censored on Weibo? Come on, social media platforms are just as guilty of stifling free speech as governments are 😒. Meanwhile, Pinduoduo is trying to do some damage control and remove the malware, but it's like they're just putting a Band-Aid on a bullet wound 💉. The bigger issue here is that these kinds of incidents keep happening because there's a lack of transparency and accountability in China's regulatory system. It's time for some real change, not just lip service from experts who can't even be bothered to learn coding 🤓.
 
OMG, this is so messed up 🤯🚨! I mean, think about it - these engineers who created the malware were just chillin', making money from selling stuff on Pinduoduo, and no one was even checking if their code was legit or not 😴. And now they're basically out of a job, which is cool, but what's more important is that this happened in the first place 🤷‍♂️.

I feel for the users who had their personal data compromised 🤕. It's like, you trust these companies to keep your info safe, and they screw up and sell it to whoever wants it 💸. And the government is just sitting there, like "oh, I guess we didn't notice that one 😴".

We need to make sure that our regulators are on top of this stuff 📊. They can't be so out of touch with what's going on in the tech world 🤖. It's embarrassing for them, and it's embarrassing for us as a society 💔. We deserve better security, and we deserve better from our government 👍
 
I just saw this thread and I gotta say, it's wild that Pinduoduo was able to hide a major malware issue for so long 🤯. And the fact that their engineers were even disbanded feels like a pretty harsh punishment... but at the same time, I get why the regulators couldn't catch on sooner 🙄. It's just crazy how tech companies can be so brazen about screwing over user security and still manage to avoid getting caught by the authorities 🚫. Anyways, it's good that they removed the exploits from their app now, but we should still be seeing more action taken against them 👊
 
I'm still shaking my head about this one 🤯. I mean, I've been using Pinduoduo's app for ages, never thought twice about it. But now I wonder what else is going on behind the scenes that we don't know about? It's like, our personal data is basically out in the open just waiting to be exploited... 😱 And those regulators are supposed to be able to stop this stuff? Unbelievable! They need to get their act together and take some real action. I'm not surprised Weibo censored the discussion, though - can't have the truth getting out and rocking the boat 🚣‍♂️. We need more transparency and accountability from our tech companies, for sure. It's time for a shake-up! 💪
 
I mean, come on! 😱 how did this even happen? I'm all about tech and innovation, but this is just crazy. Malware in a major app like Pinduoduo's? It's like they thought they could get away with it. 🤦‍♂️ And the fact that the regulators didn't catch it earlier? Forget about it! 🙄 It's embarrassing for them to say the least.

And what really gets me is that some of these experts are saying that the regulators can't even keep up with coding and programming? That's like saying they're not smart enough to make informed decisions. 😂 I mean, I get it, it's a complex issue, but come on! You gotta take responsibility for your own actions.

It's just sad that this is happening in China, where we're supposed to be one of the leaders in tech innovation and security. It looks like they still have a lot to learn about protecting their users' data. 🤔 At least Pinduoduo took down the malware and removed it from the app, but it's just a Band-Aid on a bigger problem. 💉 We need real change here, not just PR moves to calm people down. 👀
 
OMG, this is so worrying 🤯! How can an app that's supposed to be safe just get away with this? I mean, what if they've been doing it for years and nobody knew? 😱 It's like, we trust these companies with our personal info and they're basically playing with fire 🔥. And the fact that regulators couldn't even detect it is just ridiculous 🤦‍♂️. It makes you wonder how many other apps are out there doing the same thing... *shudder* 😳
 
idk how can a major company like pinduoduo mess up so bad... i mean, they got caught with their pants down 🤦‍♂️ and now they're paying the price. but at the same time, it's kinda expected that chinese companies aren't held to the same standards as others worldwide. we all know how different the regulatory landscape is over there. still, it's concerning to see a company like pinduoduo get away with this kind of thing... especially since they were supposed to be following the law 🤔
 
OMG, this is like super bad news for Pinduoduo! I mean, who wants malware in their shopping app?! 🤦‍♀️ It's crazy that the gov't wasn't aware of it too... can you believe what one expert said? "Can't even understand coding and programming"? Like, yeah, that's a thing. But seriously, this is like a huge failure on the part of regulators to keep companies in check.

I'm glad they removed the malware though, that's a big step. And I guess it's good that Pinduoduo is being transparent about what happened. But, like, why didn't anyone catch it earlier?! 🤔 It's just so... Chinese government drama. Anyway, I hope this leads to more regulations and better oversight in the future. We need to stay safe online! 💻
 
I'm so worried about Pinduoduo's security 😩 it's crazy that they didn't catch this malware on their own, I mean, who creates malware without even realizing it? 🤔 and now the people responsible for it are out of a job... or should be 👎. We need more stringent regulations in China to protect users' data, it's not just about tech expertise, it's about accountability 💻. And what's with the censorship on Weibo? 🚫 shouldn't experts be able to express their opinions without being silenced? 🗣️
 
Back
Top