FBI Warns of Data Security Risks From China-Made Mobile Apps

The FBI issued an alert on Tuesday warning users about the data security risks associated with foreign-developed mobile applications. The alert says many of the top-grossing and most-downloaded apps in the US are created by foreign companies, particularly those from China.  The agency pointed out that apps maintaining digital infrastructure in China are subject to local laws, and the Chinese government could gain access to the data of mobile app users. The FBI’s alert does not name any specific applications, but prominent examples include TikTok and the shopping apps Shein and Temu — all widely used in the United States. The DeepSeek AI chatbot also fits the profile. US authorities have taken action against TikTok, Temu, and DeepSeek over national security or data security concerns.  TikTok, which is used by more than 200 million Americans, recently finalized a deal to create a new entity that would help it avoid a ban in the United States. The FBI’s new alert warns users that the risky apps could collect their personal information, store user data in China, and some may even contain malware. “This could include malicious code and hard-to-remove malware designed to exploit known vulnerabilities in various operating systems and insert a backdoor for escalated privileges, such as enabling the download and execution of additional malicious packages designed to provide unauthorized access to users’ data,” the alert reads. The FBI has advised individuals to report suspicious activity related to foreign apps to the agency’s Internet Crime Complaint Center (IC3).  This comes shortly after the FCC announced a ban on the acquisition of new consumer routers made outside the United States. Related: Cybersecurity Firms React to China’s Reported Software Ban Related: Canada Gives Hikvision the Boot on National Security Grounds Related: Google Disrupts Chinese Hackers Targeting Telecoms, Governments WRITTEN BY Eduard Kovacs Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering. More from Eduard Kovacs Google Slashes Quantum Resource Requirements for Breaking Cryptocurrency Encryption Healthcare IT Platform CareCloud Probing Potential Data Breach European Commission Reports Cyber Intrusion and Data Theft FBI Confirms Kash Patel Email Hack as US Offers $10M Reward for Hackers CISA Flags Critical PTC Vulnerability That Had German Police Mobilized Alleged RedLine Malware Administrator Extradited to US Dell and HP Roll Out Quantum-Resistant Device Security Russian Cybercriminal Gets 2-Year Prison Sentence in US  Latest News Toy Giant Hasbro Hit by Cyberattack New DeepLoad Malware Dropped in ClickFix Attacks Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome US Charges Uranium Crypto Exchange Hacker Webinar Today: Agentic AI vs. Identity’s Last Mile Problem Axios NPM Package Breached in North Korean Supply Chain Attack Google Addresses Vertex Security Issues After Researchers Weaponize AI Agents Censys Raises $70 Million for Internet Intelligence Platform Trending Webinar: Securing Fragile OT In An Exposed World March 10, 2026 Get a candid look at the current OT threat landscape as we move past "doom and gloom" to discuss the mechanics of modern OT exposure. Register Webinar: Why Automated Pentesting Alone Is Not Enough April 7, 2026 Join our live diagnostic session to expose hidden coverage gaps and shift from flawed tool-level evaluations to a comprehensive, program-level validation discipline. Register People on the Move Moderna has promoted Farzan Karimi to Deputy Chief Information Security Officer. Brian Goldfarb has been appointed Chief Marketing Officer at SentinelOne. Token has appointed Katy Nelson as Chief Revenue Officer. More People On The Move Expert Insights The Next Cybersecurity Crisis Isn’t Breaches—It’s Data You Can’t Trust Data integrity shouldn’t be seen only through the prism of a technical concern but also as a leadership issue. (Steve Durbin) Why Agentic AI Systems Need Better Governance – Lessons From OpenClaw Agentic AI platforms are shifting from passive recommendation tools to autonomous action-takers with real system access, (Etay Maor) The Human IOC: Why Security Professionals Struggle With Social Vetting Applying SOC-level rigor to the rumors, politics, and 'human intel' can make or break a security team. (Joshua Goldfarb) How To 10x Your Vulnerability Management Program In The Agentic Era The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation. (Nadir Izrael) SIM Swaps Expose A Critical Flaw In Identity Security SIM swap attacks exploit misplaced trust in phone numbers and human processes to bypass authentication controls and seize high-value accounts. (Torsten George) Flipboard Reddit Whatsapp Email