The Chinese government requires all companies operating in China to use Golden Tax Invoicing software to pay their value-added tax. But there’s a problem. Researchers recently found that the software comes with an unexpected, and uninvited, friend, malware they have dubbed Golden Helper.
The malware bypasses User Account Control, allowing the program to install all sorts of programs with system-level privileges.
As if that weren’t enough, the researchers found that Golden Helper was preceded by an equally sophisticated malware they call Golden Spy.
Keep in mind, this is all contained within software companies are required to download and use. It’s doubtful the Chinese government did not know about the malware. If the government is willing to spy on its own constituents, it seems likely they’d have no qualms about installing malware or other spyware on technology that they sell and distribute around the world.