messaging

AppWizard
September 19, 2026
Researchers have found that Max, a messaging app mandated by the Russian government, can secretly capture screenshots, access sensitive information, impersonate users, and inject code into other applications. Developed by VK, the app integrates messaging, banking, and government services. Since September 1 of last year, it has been preinstalled on new smartphones, following the blocking of WhatsApp and Telegram. Despite its reach, it is not widely used in political circles, with insiders indicating that compliance with its use is performative.
AppWizard
September 19, 2026
The Russian government is pressuring citizens to download a mobile app called "Max," which has raised privacy and surveillance concerns. Max is a popular messaging platform in Russia and integrates messaging, government services, and payment functionalities. Research by a University of Michigan team found that Max can capture users' screens without consent, access sensitive information, impersonate users, and potentially enable cyberattacks via code injection. Despite these concerns, many Russians still use alternative messaging platforms like Telegram and Signal. Some government officials are using separate devices for Max, indicating unease about its surveillance capabilities. The app is linked to a social media company connected to the Russian government, and President Putin may have an indirect financial stake in it.
AppWizard
September 18, 2026
A new messaging and payment app called Max has emerged in Russia, developed by VKontakte, and has become the country's most utilized messaging platform. Max integrates various services, including banking and government services, and has been adopted by tens of millions of Russians. It features extensive surveillance capabilities, allowing it to take screenshots, access information without consent, impersonate users, and potentially conduct cyberattacks. The app's adoption has been largely mandatory, particularly among state employees and students. Despite its rise, Max has not replaced Telegram as a primary news source, and users have raised concerns about privacy and surveillance. Experts warn that Russia's swift implementation of digital control strategies reflects a growing trend of digital authoritarianism.
AppWizard
September 18, 2026
Google Messages has expanded its customization capabilities to include standard SMS conversations, allowing users to set custom chat themes. This feature, which was previously available only for RCS chats, has been quietly rolled out, enabling users to access chat themes in non-RCS chats. Users can find the chat themes option in the three-dot menu or by navigating to the contact info page. The customization applies only to the individual who sets it, rather than affecting all participants in a chat. This update enhances the visual appeal of SMS conversations without imposing changes on others.
AppWizard
September 18, 2026
Google Messages is introducing a feature to notify users about updates and enhancements, which has received mixed reactions. A poll of over 1,800 participants showed that 52.3% are skeptical about the feature, fearing it may create "unnecessary bloat." In contrast, 20.6% view it as a "promising addition," while 27.1% are cautiously optimistic. Users have expressed a preference for other enhancements, such as additional font settings and improved contact categorization, over the notification system. Concerns have been raised about the potential for a cluttered user experience similar to past messaging platforms.
Tech Optimizer
September 16, 2026
Iranian state-affiliated cyber actors are targeting dissidents, activists, and journalists using fake AI applications, counterfeit antivirus tools, and fabricated MRI scan results, primarily through a spyware family known as CHOSEN BRICK, which is designed for Windows systems. This campaign has been active since at least 2025 and affects individuals globally, including in the UK, US, and Netherlands. The malware establishes persistence via the Windows Registry Run key and communicates through Telegram, utilizing unique Bot IDs for each victim. CHOSEN BRICK is capable of extensive data collection, including capturing screenshots, recording audio, and stealing email content. Personal information from victims has been found on pro-Iranian leak sites, increasing harassment risks. Security measures should include monitoring for suspicious Registry entries and unusual communications, while users are advised to avoid unsolicited software installations and keep their systems updated. The FBI refers to this malware family as HEAVYGRAM.
Tech Optimizer
September 15, 2026
Iranian state-sponsored hackers are targeting dissidents, activists, and journalists using deceptive tactics, including malicious applications that impersonate reputable cybersecurity products like Norton Antivirus and KeePass. The FBI and UK authorities issued a warning about these hackers, who establish rapport with targets via social messaging platforms, posing as IT support or known contacts. They convince victims to download files that appear authentic, including AI video creation applications and other software. The spyware, named “Chosen Brick,” infects Windows PCs and has capabilities such as capturing screen content, recording audio, collecting message data, and downloading additional malware. The hackers have exploited this spyware to publish personal details of victims, increasing their harassment. The FBI advises potential victims on detecting the spyware and recommends enabling antivirus software, running regular scans, and avoiding unofficial downloads.
Winsage
September 15, 2026
Iranian state cyber actors are targeting individuals through popular messaging applications, using surveillance and data-stealing malware known as "Chosen Brick," which has been in use since at least 2025. This malware is designed for Windows systems and enables the theft of personal data, allowing Iranian spies to monitor perceived threats such as dissidents, activists, and journalists. The attacks typically begin with messages sent via WhatsApp or Telegram, impersonating trusted contacts. Attackers conduct extensive research on their targets to craft convincing messages that encourage victims to download malicious files disguised as legitimate applications. Once executed, Chosen Brick operates stealthily, evading detection and establishing a connection for command-and-control communications. It can enumerate processes, capture screen and audio content, extract sensitive information, and even wipe infected systems. Organizations suspecting compromise are advised to engage IT providers for investigations and to inform staff about potential risks. Recent alerts follow cyberattacks on water and energy sectors linked to Iran, with ongoing concerns about the implications for cybersecurity amid escalating military tensions. Additionally, five US agencies have reported that attackers are using AI-generated scripts to exploit vulnerabilities in critical infrastructure systems.
AppWizard
September 15, 2026
XChat was launched in April 2026 as a dedicated app for private conversations, featuring end-to-end encryption, disappearing messages, direct messaging, group chats, audio and video calls, file sharing, and PIN protection. It was designed to be ad-free and included features like message editing and notifications for screenshots. After its public launch, XChat's future became uncertain when it was abruptly removed from the digital landscape, with no explanation from X regarding the reasons for its withdrawal or its potential return.
Search