The article discusses the discovery of malware in Pinduoduo's mobile shopping app, which has raised concerns about the company's handling of user data and its compliance with Chinese regulations.
**Malware Discovery**
In late February, a cybersecurity firm called Dark Navy discovered malicious code in Pinduoduo's app that allowed it to access users' personal data without their consent. The malware was designed to exploit vulnerabilities in the operating system and collect sensitive information such as location, contacts, calendars, notifications, and photo albums.
**Regulatory Failure**
The discovery of the malware has raised questions about the Chinese government's regulatory oversight and enforcement of cybersecurity laws. Pinduoduo did not appear on any of the lists published by the Ministry of Industry and Information Technology or the Cyberspace Administration of China, which typically include apps that have been flagged for violating regulations.
**Expert Opinions**
Tech policy experts have expressed disappointment with the government's handling of the situation, stating that it is embarrassing for the regulator to not have detected such a serious violation. One expert noted that the regulators "can't even understand coding and programming" and therefore are unable to effectively enforce cybersecurity laws.
**Consequences**
The discovery of the malware has led to several consequences, including:
* Pinduoduo's team of engineers and product managers who developed the malware were disbanded.
* The company removed the exploits from its app in a new update.
* Several cybersecurity experts have questioned why regulators haven't taken action against Pinduoduo.
**Social Media Discussion**
The discovery of the malware has sparked a heated discussion on Chinese social media, with some experts and users expressing concern about the government's lack of oversight and enforcement. The post was censored by Weibo, a Twitter-like platform, the next day.
Overall, the article highlights the need for greater regulatory oversight and enforcement of cybersecurity laws in China, particularly in cases where companies are found to be violating regulations.
**Malware Discovery**
In late February, a cybersecurity firm called Dark Navy discovered malicious code in Pinduoduo's app that allowed it to access users' personal data without their consent. The malware was designed to exploit vulnerabilities in the operating system and collect sensitive information such as location, contacts, calendars, notifications, and photo albums.
**Regulatory Failure**
The discovery of the malware has raised questions about the Chinese government's regulatory oversight and enforcement of cybersecurity laws. Pinduoduo did not appear on any of the lists published by the Ministry of Industry and Information Technology or the Cyberspace Administration of China, which typically include apps that have been flagged for violating regulations.
**Expert Opinions**
Tech policy experts have expressed disappointment with the government's handling of the situation, stating that it is embarrassing for the regulator to not have detected such a serious violation. One expert noted that the regulators "can't even understand coding and programming" and therefore are unable to effectively enforce cybersecurity laws.
**Consequences**
The discovery of the malware has led to several consequences, including:
* Pinduoduo's team of engineers and product managers who developed the malware were disbanded.
* The company removed the exploits from its app in a new update.
* Several cybersecurity experts have questioned why regulators haven't taken action against Pinduoduo.
**Social Media Discussion**
The discovery of the malware has sparked a heated discussion on Chinese social media, with some experts and users expressing concern about the government's lack of oversight and enforcement. The post was censored by Weibo, a Twitter-like platform, the next day.
Overall, the article highlights the need for greater regulatory oversight and enforcement of cybersecurity laws in China, particularly in cases where companies are found to be violating regulations.