Source: comprehensive network Translate by: Baidu
With the explosion of the domestic artificial intelligence app DeepSeek, more and more people have started to support and use DeepSeek, a domestic software that provides great convenience for Chinese people. However, while this domestic software is entering the "home of ordinary people", some software that imitates the official DeepSeek is "born in the sky" at this time, which makes some users who are in the dark "caught off guard”.
Relying on the national computer virus collaborative analysis platform (virus.cverc.org.cn), the National Computer Virus Emergency Response Center and the National Engineering Laboratory of computer virus prevention and control technology have captured and found the Android platform trojan virus that imitates the official app of the domestic artificial intelligence model "DeepSeek" aimed at Chinese users in China.
Relevant virus sample information
Relevant virus sample information
Counterfeit DeepSeek official app
Counterfeit DeepSeek official app
Once the user clicks to run the counterfeit app, the app will prompt the user "application update is required" and induce the user to click the "update" button. After clicking, the user will be prompted to install the so-called "new version" DeepSeek application, which is actually a sub installation package containing malicious code, and will induce the user to grant him permission to run in the background and use barrier free services.
Induce users to "update”
Induce users to "update”
Induce users to authorize them to use the accessibility function
Induce users to authorize them to use the accessibility function
Induce users to install the "poison" sub installation package
Induce users to install the "poison" sub installation package
Induce users to authorize them to run in the background
Induce users to authorize them to run in the background
At the same time, the malicious app also contains malicious functions that violate citizens' personal privacy information, such as intercepting users' short messages, stealing contacts, stealing mobile app lists, and preventing users from uninstalling. After analysis, the malicious app is a new variant of the financial theft mobile trojan virus. This virus is likely to be used by criminals to defraud the telecommunications network and steal users' privacy by using this "official DeepSeek", which has seriously affected users' property, privacy and other security. Some DeepSeek users complained that they thought the software was "DeepSeek" until they asked for payment. They downloaded the software without thinking about it. The result was a fake version, and they also asked for payment.
notion image
In addition to copying "DeepSeek.apk" of DeepSeek Android client, the national computer virus collaborative analysis platform also found a number of virus sample files named "DeepSeek.exe", "DeepSeek.msi" and "DeepSeek.dmg". Since DeepSeek has not yet launched an official client program for Windows and MacOS, the relevant files are counterfeit programs. It is expected that the number of viruses and Trojans in various artificial intelligence applications, including those counterfeiting DeepSeek, will continue to increase in the future.
In addition, according to the statistics of the network security laboratory, there are more than 2000 counterfeit DeepSeek domain names from December 1, 2024 to February 2025. These counterfeit websites steal users' passwords, trick them into downloading malware, and even cheat subscription fees through phishing fraud, domain name registration and other means. What's more, the so-called "DeepSeek plus" virtual currency and "internal original shares" scams have been launched, seriously threatening the property security of users.
In this regard, China's National Computer Virus Emergency Response Center has provided the following preventive measures for netizens:
  1. Do not download app programs from network links or QR codes spread through unofficial channels such as SMS, social media software, online disk, etc. only download and install corresponding app programs through DeepSeek's official website www.DeepSeek.com) or regular mobile app stores.
  1. Keep the pre installed security protection function of the mobile phone or the third-party mobile phone security software in real-time on state, and keep the mobile phone operating system and security software updated to the latest version.
  1. During the use of the mobile phone, carefully handle the app installation requests initiated by non users. Once it is found that the app initiates permission requests for device manager, background operation and the use of barrier free functions during the installation process, it shall be rejected.
  1. In case of APP programs that cannot be uninstalled after installation, important data such as address book, SMS, photos, chat records and document files in the mobile phone shall be backed up immediately, and the mobile phone shall be safely detected and recovered under the guidance of after-sales service personnel or professionals of the mobile phone manufacturer. At the same time, pay close attention to whether my social media software and financial software have abnormal login information or abnormal operation information, and whether relatives and friends receive abnormal information sent by my mobile phone number or social media software. In case of any of the above related situations, they should timely contact relevant software suppliers and relatives and friends to explain the relevant situations.
  1. Be alert to and guard against telecom network fraud scripts against popular app software, such as "due to the abnormal service of XXX software official website, please download the official application through the following link", "as XXX software is updated to the latest version, users need to re grant background operation and barrier free function permissions" and so on to avoid being induced by cyber criminals.
  1. For downloaded suspicious files, you can visit the national computer virus collaborative analysis platform (virus.cverc.org.cn) for upload detection.
In case of any suspicious website or account, please report to the public security organ in time, or verify the information through official channels. Protect yourself from the details!
The network is a "double-edged sword". DeepSeek not only provides great convenience in life, science and technology, but also brings many challenges to many fields of network security. As users, we should be vigilant and enhance legal awareness; As legal workers, we should continue to crack down on crimes and safeguard the interests of the public.
[BVE5] Jibei Railway Line Update Forecast (24th, March)Deepseek, a full blood version of Zhejiang University, is available online for free and shared by 829 colleges and universities across the country
Loading...
Happinessrailway Offfice
Happinessrailway Offfice
A UP host who is passionate about stability, happiness, and has a little obsession with railways……🍚
小红书
Notice
🎉Welcome to my blog!🎉
Following
page icon
Due to an unknown technical fault, an internal server error has occurred, causing some web pages to be inaccessible. We sincerely apologize for any inconvenience this may cause.
Time: May 14, 2026 18:24
page icon
The appearance of the website has been changed.
Time: May 12, 2026
page icon
The appearance of the website has been changed.
Time: Nov 14, 2025 23:49
  • [BVE5 Addon Data] Jibei Railway (Ver: 4.0.2.250716) has been published on my WEB. Please Click Here and know more.
  • If you encounter any abnormalities while browsing the website (such as webpage loading errors, 404, etc.), please try refreshing or re-entering the website. If the issue persists, please try again later.
--- Thank you very much! ---
👏Welcome👏
Author: LxhNolan