[charcircuit]

>Most of the news coverage of Google’s move against Pinduoduo emphasizes that the malware was found in versions of the Pinduoduo app available outside of Google’s app store — Google Play.

Was the signing certificate the same?

[londons_explore]

You can no longer tell.

Google strips and resigns all apps uploaded to them.