Cybersecurity

Pinduoduo App Malware Detailed by Cybersecurity Researchers

  • PDD has refuted claims of malicious code in its shopping app
  • Google yanked Pinduoduo from app store as a security measure

The Pinduoduo app.

Photographer: Chan Long Hei/Bloomberg
Lock
This article is for subscribers only.

Security researchers at Moscow-based Kaspersky Lab have identified and outlined potential malware in versions of PDD Holdings Inc.’s Chinese shopping app Pinduoduo, days after Google suspended it from its Android app store.

In one of the first public accountings of the malicious code, Kaspersky laid out how the app could elevate its own privileges to undermine user privacy and data security. It tested versions of the app distributed through a local app store in China, where Huawei Technologies Co., Tencent Holdings Ltd. and Xiaomi Corp. run some of the biggest app markets.