Revealed: How Russia use mobile ‘super-app’ Max to spy on its citizens

In recent months, a significant shift has taken place in Russia’s digital landscape, marked by the emergence of a new messaging and payment app known as Max. This violet-blue application has been adopted by tens of millions of Russians, becoming the country’s most utilized messaging platform this summer. Developed by VKontakte, a social media giant closely linked with the Russian government, Max has been promoted as a patriotic alternative to popular messaging services like Telegram and WhatsApp.

Max: The Super-App of Russia

Max embodies the concept of a “super-app,” integrating various services into a single platform. It offers a suite of mini-apps that cater to daily needs, including banking, messaging, and essential government services. While its design and functionality bear resemblance to WeChat, China’s dominant super-app, Max has been rapidly imposed on a population accustomed to a relatively free internet.

Recent research has unveiled the extensive surveillance capabilities embedded within Max, which some experts describe as a “backdoor” into its entire ecosystem. Roya Ensafi, an associate professor of computer science at the University of Michigan, has highlighted the app’s potential for state surveillance, noting that it represents a sophisticated strategy employed by authoritarian regimes to monitor their citizens. According to Ensafi, Max serves as a template for other governments seeking to enhance their digital authoritarianism.

The research team discovered that Max can take screenshots of users’ devices and access the information stored within its mini-apps without user consent. This includes the ability to impersonate users and even inject code into mini-apps, raising concerns about potential cyberattacks orchestrated by the Russian government. Although Max cannot infiltrate apps like Telegram and WhatsApp, which have been banned in Russia, its pervasive use among state employees and students underscores its role in the country’s digital control.

For many Russians, the transition to Max has been less of a choice and more of a mandate. A schoolteacher in Moscow recounted how staff were instructed to switch to Max for all school communications, leaving little room for dissent. Similarly, Daniil, a university student in St. Petersburg, felt compelled to download the app to access campus facilities, despite his reservations about its security and privacy.

Within elite circles, the adoption of Max often appears performative. Some individuals have resorted to using secondary devices solely for the app, while maintaining their preferred messaging platforms for private communication. A source close to the Kremlin remarked that the app is largely for show, as many in politics continue to rely on Telegram for their daily interactions.

Despite its rapid rise, Max has not yet dethroned Telegram as a primary news source for Russians. The app’s public channels, which are crucial for disseminating news and commentary, remain underdeveloped compared to those on Telegram. Users have expressed concerns about privacy and surveillance, with many feeling a sense of unease while using the app.

As Russia continues to push Max into the hands of its citizens, experts like Ensafi warn that this development should serve as a wake-up call. Unlike China, which took decades to establish its current state of digital authoritarianism, Russia has swiftly implemented sweeping restrictions in just a few years. The landscape of private communication is evolving, and the aggressive tactics of authoritarian governments are becoming increasingly apparent.

AppWizard
Revealed: How Russia use mobile ‘super-app’ Max to spy on its citizens