Counterfeiting DeepSeek is rampant! All netizens should be vigilant!

type

Post

status

Published

date

Feb 20, 2025

slug

fmdeepseekfl

category

Interesting

summary

With the explosion of the domestic artificial intelligence app DeepSeek, more and more people have started to support and use deepseek, a domestic software that provides great convenience for Chinese people. However, while this domestic software is entering the "home of ordinary people", some software that imitates the official deepseek is "born in the sky" at this time, which makes some users who are in the dark "caught off guard”.

icon

password

comment

Source: comprehensive network Translate by: Baidu

With the explosion of the domestic artificial intelligence app DeepSeek, more and more people have started to support and use DeepSeek, a domestic software that provides great convenience for Chinese people. However, while this domestic software is entering the "home of ordinary people", some software that imitates the official DeepSeek is "born in the sky" at this time, which makes some users who are in the dark "caught off guard”.

Relying on the national computer virus collaborative analysis platform (virus.cverc.org.cn), the National Computer Virus Emergency Response Center and the National Engineering Laboratory of computer virus prevention and control technology have captured and found the Android platform trojan virus that imitates the official app of the domestic artificial intelligence model "DeepSeek" aimed at Chinese users in China.

Once the user clicks to run the counterfeit app, the app will prompt the user "application update is required" and induce the user to click the "update" button. After clicking, the user will be prompted to install the so-called "new version" DeepSeek application, which is actually a sub installation package containing malicious code, and will induce the user to grant him permission to run in the background and use barrier free services.

Induce users to authorize them to use the accessibility function

Induce users to install the "poison" sub installation package

Induce users to authorize them to run in the background

At the same time, the malicious app also contains malicious functions that violate citizens' personal privacy information, such as intercepting users' short messages, stealing contacts, stealing mobile app lists, and preventing users from uninstalling. After analysis, the malicious app is a new variant of the financial theft mobile trojan virus. This virus is likely to be used by criminals to defraud the telecommunications network and steal users' privacy by using this "official DeepSeek", which has seriously affected users' property, privacy and other security. Some DeepSeek users complained that they thought the software was "DeepSeek" until they asked for payment. They downloaded the software without thinking about it. The result was a fake version, and they also asked for payment.

In addition to copying "DeepSeek.apk" of DeepSeek Android client, the national computer virus collaborative analysis platform also found a number of virus sample files named "DeepSeek.exe", "DeepSeek.msi" and "DeepSeek.dmg". Since DeepSeek has not yet launched an official client program for Windows and MacOS, the relevant files are counterfeit programs. It is expected that the number of viruses and Trojans in various artificial intelligence applications, including those counterfeiting DeepSeek, will continue to increase in the future.

In addition, according to the statistics of the network security laboratory, there are more than 2000 counterfeit DeepSeek domain names from December 1, 2024 to February 2025. These counterfeit websites steal users' passwords, trick them into downloading malware, and even cheat subscription fees through phishing fraud, domain name registration and other means. What's more, the so-called "DeepSeek plus" virtual currency and "internal original shares" scams have been launched, seriously threatening the property security of users.

In this regard, China's National Computer Virus Emergency Response Center has provided the following preventive measures for netizens:

Do not download app programs from network links or QR codes spread through unofficial channels such as SMS, social media software, online disk, etc. only download and install corresponding app programs through DeepSeek's official website www.DeepSeek.com) or regular mobile app stores.

Keep the pre installed security protection function of the mobile phone or the third-party mobile phone security software in real-time on state, and keep the mobile phone operating system and security software updated to the latest version.

During the use of the mobile phone, carefully handle the app installation requests initiated by non users. Once it is found that the app initiates permission requests for device manager, background operation and the use of barrier free functions during the installation process, it shall be rejected.

In case of APP programs that cannot be uninstalled after installation, important data such as address book, SMS, photos, chat records and document files in the mobile phone shall be backed up immediately, and the mobile phone shall be safely detected and recovered under the guidance of after-sales service personnel or professionals of the mobile phone manufacturer. At the same time, pay close attention to whether my social media software and financial software have abnormal login information or abnormal operation information, and whether relatives and friends receive abnormal information sent by my mobile phone number or social media software. In case of any of the above related situations, they should timely contact relevant software suppliers and relatives and friends to explain the relevant situations.

Be alert to and guard against telecom network fraud scripts against popular app software, such as "due to the abnormal service of XXX software official website, please download the official application through the following link", "as XXX software is updated to the latest version, users need to re grant background operation and barrier free function permissions" and so on to avoid being induced by cyber criminals.

For downloaded suspicious files, you can visit the national computer virus collaborative analysis platform (virus.cverc.org.cn) for upload detection.

In case of any suspicious website or account, please report to the public security organ in time, or verify the information through official channels. Protect yourself from the details!

The network is a "double-edged sword". DeepSeek not only provides great convenience in life, science and technology, but also brings many challenges to many fields of network security. As users, we should be vigilant and enhance legal awareness; As legal workers, we should continue to crack down on crimes and safeguard the interests of the public.