started · updated
Max super-app reveals surveillance capabilities in Russia
A forensic investigation by researchers from the University of Michigan and other international institutions has revealed significant surveillance capabilities within Max, a Russian super-app developed by VK. The platform, which integrates messaging, banking, and government services, is designed to function similarly to China’s WeChat.
Researchers identified five specific mechanisms that grant the app extensive control over the mini-apps operating within its ecosystem. These capabilities include the ability to secretly record user screens, intercept network traffic, and inject custom code. The study also found that the app can read and modify stored data and even impersonate users to access services within the platform.
Promoted by Russian authorities as a patriotic alternative to WhatsApp and Telegram, Max has become a dominant communication tool in the country. As of September 2025, regulations require the app to be pre-installed on mobile devices sold in Russia. While researchers noted they have not confirmed active misuse by the state, they described the app's architecture as a “backdoor” into the user's digital ecosystem.
Entities
Max · Russia · University of Michigan · VK · Vladimir Putin
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 2 SOURCES] The app can impersonate users when accessing services within the platform. www.vijesti.ba · www.index.hr
- [● 5 SOURCES] The Max super-app was developed by the technology company VK. www.topalbaniaradio.com · trn.mk · www.dimokratia.gr · www.vijesti.ba · www.index.hr
- [● 2 SOURCES] The app can read and modify saved data within its mini-apps. trn.mk · www.index.hr
- [● 3 SOURCES] The app can intercept network traffic and inject its own code. trn.mk · www.vijesti.ba · www.index.hr
- [● 4 SOURCES] The Max app architecture allows for secret screen recording. trn.mk · www.dimokratia.gr · www.vijesti.ba · www.index.hr
- [○ 1 SOURCE] Max must be pre-installed on mobile devices sold in Russia as of September 1, 2025. www.vijesti.ba