Experts Warn of Privacy Risk

Chinese-owned online megastore Temu has gained popularity with its slogan of shopping 'like a billionaire on a budget.' However, security experts and lawmakers have raised concerns about Pinduoduo, a sister app to Temu, which they believe could be even more dangerous. Ian Reynolds of cybersecurity company SecureTeam warns that both apps pose potential privacy risks, with Pinduoduo being more invasive, particularly for Android users.

Invasive Permissions

Temu requests 24 permissions when downloaded, including access to Bluetooth and Wi-Fi information. Reynolds fears that these permissions could leave consumers vulnerable to cyber attacks. However, Pinduoduo is said to be far more invasive, with practices that aren't as extensive as other popular ecommerce sites like Amazon, eBay, and Etsy.

Advanced Malware

Google suspended Pinduoduo from its Play Store in March after discovering malware in some versions of the app. Simon Lardinois, senior mobile security researcher at app security company Promon, explains that the Pinduoduo app available on the Chinese app store is actually advanced malware that abuses security vulnerabilities in Android devices. It can extract sensitive information, install itself without the user's knowledge, and bypass previously unknown software vulnerabilities.

Threat to All Smartphone Users

Although the infected version of Pinduoduo is only available on the Chinese App Store, experts caution that it still poses a threat to all smartphone users, including those in the UK. Users could accidentally install the infected version while visiting China or by clicking on a malicious web link. The malware version of Pinduoduo can extract a lot of user information and make it difficult to uninstall the app.

Protecting Yourself

Experts advise downloading apps from authorized developers and legitimate sources to reduce the risk of downloading malicious versions. Users should also be cautious of sideloading apps and avoid unofficial app stores. Android owners are urged to check their devices for the Pinduoduo app and delete it as a precaution. Additionally, users should regularly monitor their devices for signs of malware and keep their software up to date.

Pinduoduo and Temu were unavailable for comment.