> how else do you think malicious PDD app got on their phones? The malicious PDD app is really, actually, published to the alt stores by PDD Holdings itself. I

> how else do you think malicious PDD app got on their phones? The malicious PDD app is really, actually, published to the alt stores by PDD Holdings itself. It loads the exploit config and post exploitation modules from PDD's own CDN. It's not the same repackage-with-malware shit plaguing China/SEA market since forever. It's first party. And the Google Play version contains the same exploit delivery codes, though no real evidence that it was activated.