The Max messenger can see Gosuslugi keys and take screenshots of embedded banking apps

The Max messenger can see Gosuslugi keys and take screenshots of embedded banking apps

This conclusion was reached by the authors of a study from the University of Michigan, the Georgia Institute of Technology, the University of Calgary, and the Indian Institute of Technology in Delhi, The Bell Tech noted.

The Max messenger is technically capable of intercepting, without users noticing, everything that happens in services embedded in it, from making a doctor’s appointment to banking apps and Gosuslugi, the researchers note.

They tested 90 mini-apps and concluded that Max can take screenshots, see everything mini-apps save on the phone, run any code inside a mini-app, see every page and every request in an app, and act on behalf of the user.

At the same time, the researchers found no traces that Max is already using these capabilities to harm users.

🔵It was previously reported that the Max messenger will transmit more data to banks, stores, and other organizations: since September, Max can transmit information from identity documents as well as documents issued by government agencies. The specific list of such documents is not specified.

🩷Dozhd’s latest news without a VPN is in our app. Download: Android | iOS