They tested 90 mini-apps and concluded that Max can take screenshots

They tested 90 mini-apps and concluded that Max can take screenshots, see everything that mini-apps save on the phone, run any code inside a mini-app, view every page and request in the app, and act on behalf of the user.

Coverage (2 sources)

• Messenger Max can see Gosuslugi keys and take screenshots of built-in banking apps — Дождь (Telegram)
• Max can take screenshots of built-in banking and government services and see Gosuslugi keys, US researchers show — The Bell

Key entities

• State Services
• University of Michigan
• Delhi
• Technological Institute
• Georgia
• Indian Institute of Technology
• University of Calgary
• Roy Ansafi
• The Bell Tech