Comment on Shopping app Temu is “dangerous malware,” spying on your texts, lawsuit claims

• GenitalHurricane@lemmy.world ⁨6⁩ ⁨months⁩ ago

  Libmanwe-lib.so is a library file in machine language (compiled). A Google search reveals that it is exclusively mentioned in the context of PDD software—all five search results refer to PDD’s apps. According to this discussion on GitHub, “the malicious code of PDD is protected by two sets of VMPs (manwe, nvwa)”. Libmanwe is the library to use manwe.

  An anonymous user uploaded a decompiled version of libmanwe-lib to GitHub. It reads like it is a list of methods to encrypt, decrypt or shift integer signals, which fits the above description as a VMP for the sake of hiding a program’s purpose.

  In plain words, TEMU’s app employed a PDD proprietary measure to hide malicious code in an opaque bubble within the application’s executables

  source

  • sndrtj@feddit.nl ⁨6⁩ ⁨months⁩ ago

    So wait, bit-shifting some integers is now considered being malicious? Is that really the defense here? Using that definition just about all software in existence is malicious.

    source

    • fishpen0@lemmy.world ⁨6⁩ ⁨months⁩ ago

      Bit shifting is not malicious on its own. Bit shifting to specifically conceal the purpose of your policy violating code from the auditors who audit the apps submitted to the App Store is malicious.

      It’s about why you are doing it and what you are doing with it and not that it’s bit shifting on it’s own.

      source
• DigDoug@lemmy.world ⁨6⁩ ⁨months⁩ ago

  [deleted]

  source

  • otp@sh.itjust.works ⁨6⁩ ⁨months⁩ ago

    I don’t believe his claims without evidence, but having a legit cover for nefarious acts is pretty standard, no?

    source
  • iAmTheTot@sh.itjust.works ⁨6⁩ ⁨months⁩ ago

    Why steal their money when they can both get them to give their money as well data to also sell?

    source