Pinduoduo App Malware Detailed by Cybersecurity Researchers

(Bloomberg) — Security researchers at Moscow-based Kaspersky Lab identified and outlined potential malware in versions of PDD Holdings Inc.’s Chinese shopping app Pinduoduo, days after Google suspended it from its Android app store.

In one of the first public accountings of the malicious code, Kaspersky laid out how the app could elevate its own privileges to undermine user privacy and data security. It tested versions of the app distributed through a local app store in China, where Huawei Technologies Co., Tencent Holdings Ltd. and Xiaomi Corp. run some of the biggest app markets.