Max super-app enables mass surveillance in Russia

A forensic investigation by researchers from several universities, including the University of Michigan, has revealed that the Russian super-app Max possesses extensive surveillance capabilities. Developed by VK, a company with close ties to the Russian state, the app functions as a centralized platform for messaging, banking, and government services, similar to China’s WeChat.

Researchers found that Max can capture screenshots of a user’s device and the contents of internal mini-apps without the user’s knowledge or consent. The app also has the ability to access stored messages and payment data, impersonate users, and inject code into mini-apps, which could potentially be used to launch cyberattacks.

Experts warn that the platform serves as a digital backdoor for the Kremlin, potentially allowing the FSB to conduct sweeping surveillance on tens of millions of citizens. Because the app’s servers are located in Russia, it is subject to national laws that grant security services access to user information.