conv.

All stories
SecurityQuiet 5d · day 6

Guardian: Russia’s Max ‘super-app’ built as surveillance backdoor, researchers find

Forensic analysis shows the state-linked messaging and payments app can screenshot devices, read mini-app data and impersonate users without their knowledge.

newest coverage 5d agosummary written 6d ago12 pieces104 likes & upvotes1 comments NewswiresMastodonGoogle NewsRedditHacker News

What to know

  • Forensic research shows Russia's Max app can screenshot devices, read mini-app data, impersonate users and inject code without user knowledge.
  • Tens of millions of Russians — officials, students, teachers, schoolchildren — have been effectively forced to adopt Max after Telegram and WhatsApp were banned.
  • Researchers warn Max is a 'blueprint' other authoritarian-leaning governments (cited: Iran, Kazakhstan, India) could follow.
  • VKontakte, Max's maker, is closely tied to the Russian state, and Putin reportedly holds an indirect stake in it.
some voices

Max's backdoor capabilities are not exceptional; Western platforms and government digital services likely have comparable surveillance access.

  • “The thing is I wouldn't be at all surprised if all western platforms have back doors for the security services... but I really don't think this is uniquely Russian.”

    JugglingWithEggs · Mastodon ↗

“Max is a blueprint any government can follow towards digital authoritarianism.”

Roya Ensafi, Associate professor, University of Michigan · The Guardian ↗ · Sep 17

Roya Ensafi Associate professor of computer science, University of MichiganVladimir PutinVladimir Putin Russian presidentVKontakte Russian social media company, maker of Max

Guardian: Russia’s Max ‘super-app’ built as surveillance backdoor, researchers find
theguardian.com

How it unfolded 2 developments, newest first · click a bar or a number to jump articlesposts

Peak 8 pieces in two hours at Sep 18, 1 AM; 12 pieces over 6 days (6 articles · 5 posts · 1 comment) Sep 18, 1 AM — 8 pieces · 5 articles · 3 posts — Mastodon 3, Newswires 2, Google News 2, +1 moreSep 18, 3 AM — 2 pieces · 1 post · 1 comment — Hacker News 1, Reddit 1Sep 18, 5 AM — quietSep 18, 7 AM — quietSep 18, 9 AM — quietSep 18, 11 AM — quietSep 18, 1 PM — quietSep 18, 3 PM — quietSep 18, 5 PM — quietSep 18, 7 PM — quietSep 18, 9 PM — quietSep 18, 11 PM — quietSep 19, 1 AM — quietSep 19, 3 AM — quietSep 19, 5 AM — 1 piece · 1 post — Mastodon 1Sep 19, 7 AM — quietSep 19, 9 AM — quietSep 19, 11 AM — quietSep 19, 1 PM — quietSep 19, 3 PM — quietSep 19, 5 PM — quietSep 19, 7 PM — quietSep 19, 9 PM — quietSep 19, 11 PM — quietSep 20, 1 AM — quietSep 20, 3 AM — quietSep 20, 5 AM — quietSep 20, 7 AM — quietSep 20, 9 AM — quietSep 20, 11 AM — quietSep 20, 1 PM — quietSep 20, 3 PM — quietSep 20, 5 PM — quietSep 20, 7 PM — quietSep 20, 9 PM — quietSep 20, 11 PM — quietSep 21, 1 AM — quietSep 21, 3 AM — quietSep 21, 5 AM — quietSep 21, 7 AM — quietSep 21, 9 AM — 1 piece · 1 article — Newswires 1Sep 21, 11 AM — quietSep 21, 1 PM — quietSep 21, 3 PM — quietSep 21, 5 PM — quietSep 21, 7 PM — quietSep 21, 9 PM — quietSep 21, 11 PM — quietSep 22, 1 AM — quietSep 22, 3 AM — quietSep 22, 5 AM — quietSep 22, 7 AM — quietSep 22, 9 AM — quietSep 22, 11 AM — quietSep 22, 1 PM — quietSep 22, 3 PM — quietSep 22, 5 PM — quietSep 22, 7 PM — quietSep 22, 9 PM — quietSep 22, 11 PM — quietYesterday, 1 AM — quietYesterday, 3 AM — quietYesterday, 5 AM — quietYesterday, 7 AM — quietYesterday, 9 AM — quietYesterday, 11 AM — quietYesterday, 1 PM — quietYesterday, 3 PM — quietYesterday, 5 PM — quietYesterday, 7 PM — quietYesterday, 9 PM — quietYesterday, 11 PM — quietToday, 1 AM — quietToday, 3 AM — quietToday, 5 AM — quietToday, 7 AM — quiet 1–2
Sep 19Sep 20Sep 21Sep 22yesterdaynow · 9:44 AM ET
  1. 2

    Readers debate whether Max is uniquely Russian

    Social media commenters responding to the Guardian report split over whether Max’s surveillance capabilities are exceptional or comparable to backdoors suspected in Western platforms and government digital services.

    “The thing is I wouldn’t be at all surprised if all western platforms have back doors for the security services... I really don’t think this is uniquely Russian.”
    — JugglingWithEggs, Mastodon user · source
    • tferrer

      Para los anales de 'No shit, Sherlock': la aplicación de mensajería que Rusia ha hecho poco menos que obligatoria en lugar de WhatsApp, Telegram y demás transmite las conversaciones al FSB https://www. theguardian.com/world/2026/sep /18/russian-super-app-max-spy-citizens

      tferrerMastodon5d ago2▲view on Mastodon ↗
    2 more of the top 3 · 3 posts in this stretch

    • Yeah, it was not even really news when it launched. Russia is pushing an app the government had commissioned. Of course it’s going to be spyware. That’s the only reason it exists.

      ProtoplanetaryNebular/technology6d agoview on r/technology ↗
    • JugglingWithEggs@mstdn.social

      The thing is I wouldn’t be at all surprised if all western platforms have back doors for the security services. We force parents of school age children to put apps on our phones to communicate with the school. We have to access services via government gateways online. None of this is ideal…but I really don’t think this is uniquely Russian…

      JugglingWithEggs@mstdn.socialMastodon6d agoview on Mastodon ↗
    all of them →
  2. 1

    University of Michigan researchers expose Max’s backdoor capabilities

    Forensic research led by Roya Ensafi found Max can secretly screenshot devices, access all data, messages and payments within its mini-apps, impersonate users, and inject code — capabilities that could enable cyberattacks. The findings were published by the Guardian.

    “What Max provides is the cleverest and also the scariest tactic by authoritarian governments to surveil their citizens.”
    — Roya Ensafi
  3. background

    Max becomes Russia’s most-used messaging app — After sustained state promotion, including celebrity endorsements, Max overtook rivals to become the country’s most-used messaging app by summer 2026.

  4. background

    Russia begins forcing rollout of the Max app — Over roughly the past 18 months, Russian authorities pushed tens of millions of citizens — officials, public-sector workers, students, teachers and schoolchildren — to install Max, promoted as a patriotic alternative to Telegram and WhatsApp.

Also covered reported alongside — the timeline has no entry for these yet

  1. 3 outlets Revealed: how Russia uses mobile ‘super-app’ Max to spy on its citizens

    first by Mastodon, 6d ago · also Guardian Media, Guardian

    1 more headline
  2. 2 outlets How Russia uses mobile ‘super-app’ Max to spy on its citizens

    first by People Daily, 6d ago · also Independent UK

    1 more headline

What people are saying 0 voices from 0 sites · best of 3 · verbatim