davincifans101 / pinduoduo_backdoor_detailed_report Goto Github PK

"behaviors such as unti-install"

Should be anti-install. Maybe caused by Speech-to-Text service?

如图所示

只分析代码可行性非常低(针对的安卓OS版本之间差异很大)，请给出具体可行性demo和可以复现的的具体系统版本。

https://github.com/caonimaflanker/caonimaflanker

Hello,

Congratulations to the author(s) on a very impressive piece of work.

Questions:

1. How do you get from this to "40% of GMV," "40% of users" faked?
2. For Pinduoduo to engage in this amount of spyware/malware activity across so many phones, surely it would have consumed a lot of data or raised other system flags, across multiple different Android versions. How could it go unnoticed for so long?
3. Don't many other Chinese Android apps engage in (less egregious) versions of this behavior?

Can you share the sample configuration file delivered remotely?
可以分享一下远程下发的配置文件样本吗？