Home / News

China’s App Allows “Superuser” Access to Entire Data of Over 100 Million Android-Based Phones

The Chinese Communist Party’s app called ‘Study the Great Nation’ released in January is reported to have “superuser” access to the entire data of over 100 million Android-based phones via a backdoor. The propaganda app, billed as an educational tool, has been promoted aggressively throughout the year. The app was analyzed by the human rights activist group, Open Technology Fund (OTF), in partnership with the German cyber-security firm Cure53. “Earlier this year, it became the most downloaded app on the Chinese App Store, and the Chinese government claims that it now has over 100 million users,” reports OTF, which revealed the results over the weekend. It adds: “The numbers are sky-high, with the Huawei store reporting 300 million downloads, and Wadoujia 195 million downloads. ‘Study the Great Nation’ features content like news articles and quizzes alongside a leaderboard where users’ scores can be viewed alongside those of their coworkers.”

What the audit found about the app’s backdoor capabilities:

Superuser Privileges: “Contains code that amounts to a backdoor to rooted devices, essentially granting complete administrator-level access to a user’s phone.”

Scanning Apps: “Study the Great Nation actively scans to find other apps that are running on the user’s device, drawing from a list of 960 applications.”

Weak Encryption by Design: “While Study the Great Nation collects and transmits large amounts of personal user data, the app’s security is weakened - seemingly by design - through the use of weak cryptographic algorithms in areas containing information linked to users’ biometric data and emails.”

Detailed Log Reports: “Cure53 also found that the app collects general information such as the device’s unique IMEI number, connection information, information about app usage sessions, and location.”

By CircleID Reporter

CircleID’s internal staff reporting on news tips and developing stories. Do you have information the professional Internet community should be aware of? Contact us.

Visit Page

Filed Under


Comment Title:

  Notify me of follow-up comments

We encourage you to post comments and engage in discussions that advance this post through relevant opinion, anecdotes, links and data. If you see a comment that you believe is irrelevant or inappropriate, you can report it using the link at the end of each comment. Views expressed in the comments do not represent those of CircleID. For more information on our comment policy, see Codes of Conduct.

CircleID Newsletter The Weekly Wrap

More and more professionals are choosing to publish critical posts on CircleID from all corners of the Internet industry. If you find it hard to keep up daily, consider subscribing to our weekly digest. We will provide you a convenient summary report once a week sent directly to your inbox. It's a quick and easy read.

I make a point of reading CircleID. There is no getting around the utility of knowing what thoughtful people are thinking and saying about our industry.

Co-designer of the TCP/IP Protocols & the Architecture of the Internet




Sponsored byVerisign

Threat Intelligence

Sponsored byWhoisXML API

Brand Protection

Sponsored byCSC


Sponsored byDNIB.com

New TLDs

Sponsored byRadix

Domain Names

Sponsored byVerisign

IPv4 Markets

Sponsored byIPv4.Global