Qihoo 360

(Redirected from WoSign)

Qihoo 360 (Chinese: 360; pinyin: Qíhǔ Sānliùlíng; approximate pronunciation CHEE-hoo), full name 360 Security Technology Inc., is a Chinese internet security company[2] that has developed the antivirus software programs 360 Safeguard and 360 Mobile Safe, the Web browser 360 Secure Browser, and the mobile application store 360 Mobile Assistant. It was founded by Zhou Hongyi and Qi Xiangdong in June 2005.[3][4] The company's head office is in Chaoyang District, Beijing.[5]

360 Security Technology, Inc.
Native name
三六零安全科技股份有限公司
Company typePublic
SSE: 601360
IndustryComputer software
Founded2005; 19 years ago (2005)
FounderZhou Hongyi (Chairman, CEO, co-founder), Qi Xiangdong (President, director, co-founder)
HeadquartersBeijing, China
Area served
Worldwide
Key people
Zhou Hongyi, Qi Xiangdong, Cao Shu (Chief Engineer & Director), Xu Zuoli Alex (Co-CFO), Yao Jue (Co-CFO)
ProductsSecurity software
ServicesComputer security
Revenue$1.39 billion (2014)[1]
$222.8 million (2014)[1]
Number of employees
4,200
SubsidiariesOpera (20%)
Websitewww.360.cn Edit this at Wikidata

History

edit

In the summer of 2012, Qihoo 360 entered the smartphone market by launching the Battleship phone together with the large Chinese electronics company Haier.[6] Qihoo 360 stated that Haier will provide the hardware while Qihoo 360 will focus on customising the software, albeit the main operating system will be Android. Qihoo 360 received over 220,000 pre-orders for the phone the first day.[7]

Later in 2012, Qihoo 360 launched the search engine so.com, thereby directly competing with Baidu, the most prominent search engine in China. Qihoo's share of unique visitors grew to 10.52% of the total search engine market in China.[8] At the end of July 2013, Qihoo was in early talks to acquire Sohu.com’s Sogou.com search engine for around $1.4 billion.[9] In early 2015, Qihoo rebranded its so.com search engine as haosou.com. "Hao" in Chinese means good; Haosou directly translated to English means "good search engine".[10]

In December 2013, the company increased its stake in the Brazilian tech company PSafe.[11][12]

On July 11, 2014, the company set up a venture capital fund in Silicon Valley.[13]

On December 18, 2015, Qihoo 360 agreed to be acquired by a group of investors in a deal valued at about $9.3 billion.[14] On July 18, 2016, Qihoo 360 bought most of Opera Software for US$600 million.[15] In 2018, Qihoo 360 invested in Shanghai-based i-Soon.[16]

U.S. sanctions

edit

In May 2020, Qihoo 360 and other Chinese companies were placed on the Bureau of Industry and Security's Entity List due to U.S. national security concerns.[17][18] The U.S. accused Qihoo 360 and others of playing roles in the crackdown in Xinjiang by "enabling China’s high-technology surveillance" in Xinjiang. On 25 May, Chinese Foreign Ministry spokesman Zhao Lijian strongly criticized the step, asking the US to "revoke the relevant decision and stop interfering in China’s internal affairs".[19] In October 2022, the United States Department of Defense added Qihoo 360 to a list of "Chinese military companies" operating in the U.S.[20]

Controversies

edit

Lawsuits

edit

Qihoo has been described by Forbes as a confrontational and litigious company due to its involvement in various anti-competition lawsuits.[21]

The company was involved in lawsuits with Tencent,[21][22] starting with the 360 v. Tencent dispute, as well as other companies such as Baidu,[23] Emiage,[24] and Sogou.[25]

Traffic data

edit

The company has been accused by Anonymous of overstating the volume of traffic to its site to attract advertisers.[26]

Antivirus test results

edit

The antivirus testing companies AV-Comparatives of Austria, Germany's AV-Test, and Virus Bulletin of the UK have accused Qihoo of providing for testing its anti-virus equipped with a Bitdefender engine, while the consumer version uses Qihoo's own QVM engine.[27][28]

Certificates

edit

According to documents released by the Mozilla Corporation in 2016, Qihoo appears to have acquired a controlling interest in the previously Israeli-run Certificate Authority "StartCom", through a chain of acquisitions, including the Chinese-owned company WoSign. WoSign also has a certificate authority business; WoSign has been accused of poor control and of misissuing certificates.[29] Furthermore, Mozilla alleges that WoSign and StartCom violate their obligations as Certificate Authorities in respect of their failure to disclose the change in ownership of StartCom; Mozilla is threatening to take action, to protect their users.[30]

Google have stated that their Chrome product will no longer trust by default any certificates signed by StartCom or Wosign roots, starting with Chrome 61.[31] Mozilla have stated that their Firefox product will no longer trust by default any certificates signed by StartCom or WoSign roots, starting with Firefox version 58.[32]

Hidden backdoors

edit

In 2012, a whistleblower reported a hidden backdoor in 360 Secure Browser. The Product Director of 360 Secure Browser, Tao Weihua, responded that "Whoever has a mind to beat a dog will always be able to find a stick" and accused the whistleblower of "smearing 360 on behalf of Baidu", which the whistleblower said was "the worst professional response in history". Independent analysis of the claim showed that the browser has an "undeclared mechanism (i.e., via ExtSmartWiz.dll) which regularly connects to the server (e.g., every 5 minutes), and allows it to download files of any type (including executables) from the server."[33]

In October 2020, Mnemonic reported the existence of a backdoor affecting a line of children's watches under the Xplora brand manufactured by Qihoo.[34]

Widespread streaming webcasts of security footage in China

edit

In December 2017, the Chinese Government acted to curtail the widespread webcasting of live security-company-cameras, private webcams, and IP camera footage, voicing concerns of violations of privacy and portrait rights, sanctioning Qihoo.[35][36][37]

Samsung spyware

edit

In January 2020, a Reddit user reported Qihoo's presence in Samsung mobile phones as a pre-installed storage cleaner in the device settings, from where it sends data packages to Chinese servers. The user could not identify which information is sent specifically.[38] Later, Samsung representative declared that the only data sent back to Qihoo is generic information needed to optimize storage — specifically naming OS version, phone model, and storage capacity, among other data. Qihoo's main contribution is a reference library for identifying junk files, but that library is stored locally in the utility, and Qihoo never receives data that would allow it to identify a particular file on a user's device.[39]

National Business Daily lawsuit

edit

References

edit
  1. ^ a b "2014 Annual Report". Qihoo. Archived from the original on 20 March 2015. Retrieved 9 March 2015.
  2. ^ "Tech Mogul Gets $13 Billion Richer Just by Leaving New York for China". Bloomberg.com. 2018-02-28. Archived from the original on 2020-11-26. Retrieved 2018-02-28.
  3. ^ "Qihoo 360 Technology Company Limited – Investor Relations – Management". Archived from the original on 2012-07-09.
  4. ^ "CEO profile". Investing.businessweek.com. Retrieved 2017-08-10.[dead link]
  5. ^ "Contact Us Archived 2011-04-05 at the Wayback Machine." Qihoo 360. Retrieved on May 11, 2016. "Address :Building #2, No. 6 Jiuxianqiao Road, Chaoyang District, Beijing 100015, China"
  6. ^ "Qihoo 360 Launches Battleship Phone". Techinasia.com. Archived from the original on 2017-08-11. Retrieved 2017-08-10.
  7. ^ "220,000 pre-order of the Battleship phone". Gsminsider.com. Archived from the original on 2020-08-07. Retrieved 2017-08-10.
  8. ^ "Qihoo market share". Marbridgeconsulting.com. Archived from the original on 2017-08-11. Retrieved 2017-08-10.
  9. ^ "Deals of the day -- mergers and acquisitions". Reuters. 19 July 2013. Archived from the original on 24 September 2015. Retrieved 1 July 2017.
  10. ^ "Qihoo 360 Re-brands Its Search Engine So.com To Haosou.com". TheDomains.com. 8 January 2015. Archived from the original on 11 August 2017. Retrieved 10 August 2017.
  11. ^ "The New York Times Dealbook: Qihoo Chinese Firm Increases Stake in Brazilian Tech Company". The New York Times. 4 December 2013. Archived from the original on 16 December 2014. Retrieved 11 December 2014.
  12. ^ "PSafe Official Website". Psafe.com. Archived from the original on 13 December 2014. Retrieved 11 December 2014.
  13. ^ Lizette Chapman (19 July 2013). "360nJoinsnAsian Companies Launching VC Groups in Silicon Valley". The Wall Street Journal. Archived from the original on 13 November 2016. Retrieved 4 August 2017.
  14. ^ "Chinese tech company Qihoo 360 latest to be taken private". Reuters.com. 18 December 2015. Archived from the original on 11 August 2017. Retrieved 10 August 2017 – via Reuters.
  15. ^ Lunden, Ingrid (18 July 2016). "Opera renegotiates its $1.2B sale down to $600M for its browsers, privacy apps, Chinese JV – TechCrunch". Techcrunch.com. Archived from the original on 10 January 2018. Retrieved 10 August 2017.
  16. ^ "Same Same, but Different". Margin Research. 2024-02-29. Archived from the original on 2024-02-29. Retrieved 2024-02-29.
  17. ^ Shepardson, David; Freifeld, Karen (2020-05-23). "Dozens of Chinese companies added to U.S. blacklist in latest Beijing rebuke". Reuters. Archived from the original on 2020-06-07. Retrieved 2020-06-07.
  18. ^ McDonald, Joe (2020-05-25). "China Demands US Withdraw Sanctions on Tech Suppliers". Associated Press. Archived from the original on 2020-06-07. Retrieved 2020-06-07.
  19. ^ McDonald, Joe (25 May 2020). "China demands US withdraw sanctions on tech suppliers". AP News. Archived from the original on 24 October 2021. Retrieved 12 October 2021.
  20. ^ "DOD Releases List of People's Republic of China (PRC) Military Companies in Accordance With Section 1260H of the National Defense Authorization Act for Fiscal Year 2021". U.S. Department of Defense. 2022-10-05. Archived from the original on 2022-10-05. Retrieved 2022-10-05.
  21. ^ a b Custer, Charles (24 Feb 2014). "Qihoo 360 Loses In Court Again". Forbes Asia. Archived from the original on 4 October 2018. Retrieved 10 September 2017.
  22. ^ Kan, Michael (22 Nov 2010). "Chinese Internet Firms Forced to Apologize Over Privacy Spat". PCWorld. Archived from the original on 20 February 2016. Retrieved 11 February 2016.
  23. ^ Custer, Charles (5 Sep 2013). "Baidu sues Qihoo 360 for unfair competition, asks for $100k in compensation". Tech in Asia. Archived from the original on 16 February 2016. Retrieved 11 February 2016.
  24. ^ Custer, Charles (18 Oct 2014). "Oh, the irony: days after losing its own monopoly abuse suit, Qihoo is getting sued for monopoly abuse". Tech in Asia. Archived from the original on 16 February 2016. Retrieved 11 February 2016.
  25. ^ Custer, Charles (20 Jan 2015). "Qihoo 360 loses again in China's courts, ordered to pay Sogou $8.2 million for unfair competition". Tech in Asia. Archived from the original on 16 February 2016. Retrieved 11 February 2016.
  26. ^ Muncaster, Phil (3 Jul 2012). "China's internet wunderkind in the dock over alleged fraud". The Register. Archived from the original on 1 May 2017. Retrieved 10 September 2017.
  27. ^ Wan, Adrian (5 May 2015). "Qihoo cuts ties with three antivirus testing firms in software dispute". South China Morning Post. Archived from the original on 7 March 2016. Retrieved 11 February 2016.
  28. ^ Keizer, Gregg (1 May 2015). "Antivirus test labs call out Chinese security company as cheat". Computerworld. Archived from the original on 25 June 2016. Retrieved 18 July 2016.
  29. ^ Dan Goodin (27 September 2016). "Firefox ready to block certificate authority that threatened Web security". arstechnica.com. Archived from the original on 8 April 2020. Retrieved 26 May 2020.
  30. ^ "WoSign and StartCom". Google Docs. Mozilla Corp. Archived from the original on 26 September 2016. Retrieved 2 October 2016.
  31. ^ Osborne, Charlie. "Google guillotine falls on certificate authorities WoSign, StartCom – ZDNet". ZDNet. Archived from the original on 2020-08-06. Retrieved 2020-04-16.
  32. ^ "Mozilla to Completely Ban WoSign, StartCom Certificates in Firefox 58 – SecurityWeek.Com". www.securityweek.com. September 2017. Archived from the original on 2017-12-31. Retrieved 2017-12-30.
  33. ^ Intelligence Defense Friends Laboratory (November 25, 2012). "Independent Report on Alleged "Hidden Backdoor" in Qihoo 360 Secure Browser" (PDF). Archived from the original (PDF) on March 27, 2014. Retrieved 2017-06-21.
  34. ^ Claburn, Thomas (October 12, 2020). "Backdoorer the Xplora: Kids' smartwatches can secretly take pics, record audio on command by encrypted texts". The Register. Archived from the original on October 18, 2020. Retrieved October 19, 2020.
  35. ^ Zhang, Sarah (6 November 2014). "A Creepy Website Is Streaming From 73,000 Private Security Cameras". Archived from the original on 2017-12-24. Retrieved 2017-12-24.
  36. ^ "China surveillance streaming platform shut down amid privacy concerns". Reuters. 20 December 2017. Archived from the original on 26 December 2017. Retrieved 25 December 2017.
  37. ^ "Privacy fears over online surveillance footage broadcasts in China". 13 December 2017. Archived from the original on 2017-12-24. Retrieved 2017-12-25.
  38. ^ "Prevent Samsung's Shady 360 Storage Cleaner from Phoning Home to China". android.gadgethacks.com. 6 January 2020. Archived from the original on 10 January 2020. Retrieved 9 January 2020.
  39. ^ "Samsung's Device Care app is sending data back to China — but it's less scary than it sounds". theverge. 8 January 2020. Archived from the original on 2020-02-16. Retrieved 2020-02-16.
edit