Mass account hacks in the Max messenger are spreading through phishing links disguised as “vote for me” requests sent from trusted contacts. After clicking the link, users lose access to their accounts, and attackers continue spreading the scam through their contacts.
Key risks include stolen credentials, unauthorized access, and rapid chain attacks within chats.
What to do: change your password immediately, log out of all devices, scan your device for malware, and enable two-factor authentication.
The main reason this works is user trust and lack of link verification.
A growing wave of cyberattacks is targeting users of the Max messenger, especially schoolchildren and group chat participants.
The attack follows a simple pattern:
Real-world reports confirm that these incidents are spreading rapidly in school communities and private chats.
Users receive messages from:
Typical phrases:
This is a classic social engineering tactic.
The link leads to a fake website that:
After interacting with the page:
Once hacked:
This creates a fast-spreading chain attack.
Several factors increase risk among younger users:
This scam is not new. Similar attacks were widely used in Telegram:
The mechanism remains the same: phishing and viral spread through contacts. Now it has shifted to Max.
Social engineering — exploiting trust in known contacts.
Phishing — fake websites collecting login data.
Session hijacking — access without needing a password.
Malware — hidden apps or scripts installed on the device.
Basic rules:
Practical steps:
Is this a virus or a scam?
Mostly phishing, but sometimes malware is involved.
Can accounts be hacked without a password?
Yes, via session or token theft.
Why do messages come from friends?
Because their accounts are already compromised.
Is it dangerous just to open a link?
Yes, in some cases it is enough to trigger the attack.
Mass account hacks in Max are an evolution of well-known scam techniques adapted to a new platform.
The main vulnerability is user behavior, not just technology.
Regular cybersecurity education and cautious behavior online are essential.
If you cannot restore access on your own, consider contacting specialists at antiban.pro