Chinese Agencies Flag 82 Mobile Apps and Backdoor-Laden Player

Xinhua News Agency reported that China's National Computer Virus Emergency Response Center identified 82 mobile applications violating rules on personal information collection and usage. In parallel, monitoring by the National Computer Network Emergency Response Technical Team revealed a Windows video player, Jianpian Player, contains a built-in backdoor capable of gathering terminal details, running downloaded programs, and executing remote code without user awareness. Peking University of Technology expert Yan Huaizhi explained that the most prevalent issue among the cited mobile applications involved ambiguous privacy disclosures. These policies failed to list embedded third-party plugins or specify the purpose and scope of data gathering, which trapped users into legally granting permissions upon confirming terms. In contrast, Yan Huaizhi observed that Jianpian Player persistently evaded detection by altering communication domains, interfaces, and encryption methods. Official testing confirmed that the application continually maintained core malicious behaviors including script delivery, information collection, and process injection. Yan suggested subjecting third-party software development kits to independent inspection to assign responsibility back down the supply chain. He also proposed opening enterprise intelligence interfaces for network emergency agencies and redirecting detection resources toward emerging carriers such as mini-programs.

A built-in backdoor in Jianpian Player bypasses user consent by maintaining a permanent background program on the terminal. Using technical measures, it assembles a network identity profile, transmits viewing records, and utilizes scheduled channels to remotely execute programs on the affected device.