Russia has forced tens of millions of citizens to install Max, a super-app developed by VKontakte that combines messaging, payments, and government services. Forensic research reveals Max contains powerful surveillance capabilities including screenshotting, message access, and code injection, functioning as a backdoor into users' devices and mini-apps. The app represents an escalation of digital authoritarianism and a model other authoritarian governments may replicate.