Digital ID

Zao app went viral but raised serious privacy concerns

The Chinese face-swapping ZAO app that allows users to create photos starring along their favorite characters is raising privacy concerns.

The ZAO app is one of the most downloaded applications, but it made the headlines due to privacy concerns.

The AI-based iPhone app was released on august 30, 2019, it allows its users to create photos starring along with their favorite characters in a movie, TV program or a music video.

Users can superimpose their face onto actors popular characters in many video clips by uploading a selfie.

Source: Forbes

ZAO was developed by MoMo, one of China’s most popular dating apps, and was downloaded in just 3 days by millions of users, over the weekend, the app climbed to the top of the free apps in the Chinese iOS App Store.

Like FaceApp, ZAO was criticized by some users for the potential abuse of deepfake technology.

Privacy advocated noticed that an earlier version of ZAO’s user agreement stated that users who willingly uploaded their selfie agree to give ZAO full ownership and “free, irrevocable, permanent, transferable, and relicense-able” license to all user-generated content. The agreement was authorizing the developer to use their images also for marketing purposes.

Then the company was forced to change its user agreement that now says that the company will not use pictures or videos uploaded by users for anything other than app improvements without their consent.

“We fully understand your concerns about privacy issues. The questions you have raised have been received, and we will change it in a place that is not well-considered. It will take some time,” read a statement published on ZAO’s Weibo account.

ZAO also announced it will also remove any data that users uploaded to its servers, but that was subsequently deleted.

WeChat decided to restrict access to the ZAO app on its messaging platform due to privacy concerns, even if the users still be able to upload videos they have created with ZAO app. WeChat will not allow to download the app from its platform or send an invite link to another WeChat user.

ZAO can be download for free only in the Chinese Apple App Store, it is not available for Android so be vigilant and don’t download any up that pretend to be the Android version of ZAO.

[adrotate banner=”9″] [adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – ZAO app, privacy)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

Crooks use a fake antivirus site to spread Venom RAT and a mix of malware

Researchers found a fake Bitdefender site spreading the Venom RAT by tricking users into downloading…

4 hours ago

Iranian Man pleaded guilty to role in Robbinhood Ransomware attacks<gwmw style="display:none;"></gwmw>

Iranian man pleads guilty to role in Baltimore ransomware attack tied to Robbinhood, admitting to…

5 hours ago

DragonForce operator chained SimpleHelp flaws to target an MSP and its customers

Sophos warns that a DragonForce ransomware operator chained three vulnerabilities in SimpleHelp to target a…

15 hours ago

Russia-linked APT Laundry Bear linked to 2024 Dutch Police attack

A new Russia-linked APT group, tracked as Laundry Bear, has been linked to a Dutch…

22 hours ago

Nova Scotia Power confirms it was hit by ransomware attack but hasn’t paid the ransom

Nova Scotia Power confirms it was hit by a ransomware attack but hasn't paid the…

1 day ago

Crooks stole over $200 million from crypto exchange Cetus Protocol

Cetus Protocol reported a $223 million crypto theft and is offering to drop legal action…

1 day ago