Pinduoduo: The Dark Side of China’s Most Popular Shopping App
Pinduoduo, one of China’s most popular shopping apps, has been found to have malware that can bypass users’ cell phone security, monitor activities on other apps, and change settings. According to cybersecurity researchers, the app can also spy on users and competitors, allegedly to boost sales.
The app, which boasts a user base of over 750 million users a month, has been accused of taking violations of privacy and data security to the next level. Experts say that while many apps collect vast troves of user data, Pinduoduo’s actions are highly unusual and damning.
The Rise of Pinduoduo
Pinduoduo was founded in 2015 by Colin Huang, a former Google employee, and has since become one of China’s largest e-commerce companies. The app has posted triple-digit growth in monthly users until the end of 2018, but its increase in monthly users had slowed to around 50% by the middle of 2020.
Malware and Data Security
The malware in Pinduoduo’s app was discovered by cybersecurity researchers from Check Point Research, Oversecured, and WithSecure. The researchers found code designed to achieve ‘privilege escalation,’ a type of cyberattack that exploits a vulnerable operating system to gain a higher level of access to data than it’s supposed to have.
Experts Weigh In
Mikko Hyppönen, chief research officer at WithSecure, said, ‘We haven’t seen a mainstream app like this trying to escalate their privileges to gain access to things that they’re not supposed to gain access to.’ Sergey Toshin, founder of Oversecured, described Pinduoduo’s malware as ‘the most dangerous malware’ ever found among mainstream apps.
Consequences and Implications
The revelations are likely to draw more attention to Pinduoduo’s international sister app, Temu, which is topping US download charts and fast expanding in other Western markets. There is also concern that Pinduoduo’s alleged actions risk casting a shadow over its sister app’s global expansion.
Conclusion
Pinduoduo’s alleged actions raise serious concerns about data security and privacy. The app’s ability to bypass users’ cell phone security and spy on competitors is a serious breach of trust. As the app continues to grow in popularity, it’s essential to address these concerns and ensure that users’ data is protected.
Source: CNN



