[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 19 sources · 4 days · First seen · Last updated

Surveillance risks in Russian Max super-app

Overview

Researchers from several universities, including the University of Michigan, have identified extensive surveillance capabilities within Max, a Russian ‘super-app’ developed by VKontakte. The platform, which integrates messaging, banking, and government services, is promoted by Russian authorities as a patriotic alternative to Western applications and has been mandated for pre-installation on all new mobile devices in the country as of September 2025.

Forensic analysis reveals that the app’s architecture allows it to secretly record screens, capture screenshots of internal mini-apps, intercept network traffic, and inject custom code. These functionalities enable the platform to read and modify saved data, access stored messages and payment information, and even impersonate users.

Experts warn that the platform may serve as a ‘digital backdoor for the Kremlin,’ potentially allowing the FSB to conduct sweeping surveillance on millions of citizens. Because the app’s servers are located in Russia, the platform is subject to national laws that grant security services access to user information.

Entities

VK · Vladimir Putin · University of Michigan · Max · Russia

Timeline

  1. 2 days ago

    [TECHNOLOGY] 2 sources
    Max super-app enables mass surveillance in Russia

    Researchers warn that the Russian super-app Max, developed by VK, can secretly screenshot devices, impersonate users, and access private messages and payments, facilitating mass state surveillance.

  2. 5 days ago

    [TECHNOLOGY] 17 sources
    Max super-app: Researchers find surveillance risks in Russian platform

    University of Michigan researchers found that Russia's Max super-app can secretly record screens, intercept traffic, and impersonate users, enabling extensive digital surveillance via its mini-app ecosystem.

Sources

alaraby.co.uk · dagens.de · delo.si · dimokratia.gr · eventbrite.co.uk · fehmarn24.de · hna.de · independent.co.uk · index.hr · kreiszeitung.de · mannheim24.de · merkur-online.de · nova.rs · slovenskenovice.si · thepressroom.gr · topalbaniaradio.com · trn.mk · tz.de · vijesti.ba