Cloudflare Flags Russian Messenger MAX as Spyware Amid Security Concerns

Cloudflare Flags Russian Messenger MAX as Spyware Amid Security Concerns

First seen 30 Apr 2026, 12:26 UTC NashanivaZamin.UzMezhaUkranewsUa.News+3 89% similarity 72.5

Article Content

Browse articles
ThreatCluster

Cloudflare has classified the Russian messaging app MAX, associated with the domain max.ru, as spyware due to its potential for covert data collection and transmission. This designation follows reports of unusual activity and security breaches linked to the app, which is promoted by the Russian government. The MAX messenger, available in 40 countries, is suspected of accessing users' messages, calls, and location data. Previously, a similar label was applied to the alternative Telegram client Telega, which was subsequently removed from app stores. The MAX app, developed by VK, has undergone recent updates, including the addition of features like polls and age verification. The app's spyware label raises significant concerns regarding user privacy and data security. As of now, the app remains available for download on major platforms despite the warnings.

Key Points: • Cloudflare flagged the MAX messenger as spyware due to potential data collection. • The app is linked to Russian state surveillance and is available in 40 countries. • Previous similar labels have led to app removals from major app stores.

ThreatCluster AI

Timeline

2026-03-01
Ukraine's CCD warned about the promotion of MAX messenger.
2026-04-21
MAX app name changed to 'MAKS' to reflect new features.
2026-04-25
Polls and stories feature added to the MAX messenger.
2026-04-27
Age verification system launched for MAX users.
2026-04-30
Cloudflare officially labels max.ru as spyware.

Community

Browse all →