AntiMalwareJuly 16, 2026🇷🇺Translated from Russian

VK and MAX Apps Removed from Google Play Store Amid EU Sanctions on Russian Company

VK and its messenger MAX have been removed from the Google Play Store, making the applications unavailable for new downloads and updates through Google's official Android marketplace.

The company confirmed the disappearance of the services but assured users that already installed versions continue to operate without any restrictions. Existing users retain full access to messages, calls, events, and push notifications, while updates remain available through alternative distribution channels.

Users seeking to install or update the applications can now use RuStore, Huawei AppGallery, Samsung Galaxy Store, Xiaomi GetApps, and other third-party Android stores. In some cases, the apps themselves may display an in-app notification with an "Update" button when a new version is released.

The statement from VK did not disclose the specific reasons behind the removal from Google Play or clarify whether the measure is temporary. For current users, the change has minimal impact, but new users must navigate alternative app catalogs to obtain the software.

This situation represents a significant shift in distribution strategy, with RuStore transitioning from a backup option to the primary channel for VK services. The move follows the European Union's decision to include VK in its sanctions list due to the company's development of the national messenger MAX. Previously, other VK applications such as Dzen and VK Video were also removed from the Apple App Store.

Related articles

HabrPolicy & Regulation

Why Russia Needs Specialized Circumvention Tools Beyond Standard VPNs

The developers of Tunnel Kitten explain why another circumvention project is necessary despite the availability of numerous VPN services and solutions like AmneziaWG. A prolonged outage affected many long-term users, damaging trust and requiring ongoing fixes. Standard VPNs do not address the core issue: creating and maintaining tools to bypass internet blocks has been criminalized in Russia. This legal asymmetry makes public VPN services and self-hosted solutions risky or insufficient for users facing state-level censorship. Tunnel Kitten positions itself as a project focused on a different task that accounts for these legal realities. The team emphasizes that the problem is not merely technical but tied to the criminalization of circumvention efforts.

BoletimSecPolicy & Regulation

US Presidential Memo Authorizes Selected Private Companies to Join Federal Cyber Operations Against Foreign Criminal Groups

The United States government has established a formal program allowing vetted private-sector companies to participate in offensive cyber operations targeting foreign criminal organizations. Signed by President Donald Trump on August 12, 2026, the presidential memorandum places the initiative under the National Coordination Center with joint oversight from the Department of Justice and the Department of Homeland Security. Participating firms will operate exclusively under government contracts, direction, and supervision, with strict requirements including technical evaluations, financial guarantees of at least one million dollars, and pre-approval for every operation. The program focuses on disrupting ransomware, phishing, financial fraud, and other schemes affecting American citizens while imposing clear limits to prevent unintended harm to US persons or escalation to prohibited levels of force. In contrast to Brazil’s ongoing policy discussions, the US move formally recognizes that advanced offensive capabilities now reside primarily in the private sector and creates a regulated mechanism to access them. Operational rules must be published within 60 days, marking a significant shift in how governments integrate private expertise into state-directed cyber actions.

AntiMalwarePolicy & Regulation

Russia to Require Independent Lab Testing of Sovereign AI Models for Legal and Traditional Values Compliance

The Russian Ministry of Digital Development is discussing a certification scheme under which developers can submit large generative AI models to accredited independent laboratories. These labs will verify compliance with Russian legislation and traditional spiritual-moral values defined in presidential decree No. 809. Only models seeking official national or sovereign status, which unlocks state support, data access and priority procurement, will undergo the process. Developers must first conduct self-testing according to a risk-oriented methodology and supply architecture details, filtering mechanisms and other documentation. Accredited laboratories will then run benchmarks, attempt prompt-injection attacks and produce evaluation reports, while the final decision remains with MinTsifry. Separate security assessments for government systems will be performed by the FSB and FSTEC Russia. Experts have called for transparent, reproducible tests and periodic re-certification after model updates.

SecuritylabPolicy & Regulation

Why Separate Corporate and Personal Email Accounts: Risks of Mixing Work and Private Communications

Mixing corporate and personal email accounts creates serious security, compliance, and operational risks for both employees and organizations. When employees forward contracts or client data to personal mailboxes to bypass size limits or convenience, copies proliferate beyond company control in phones, backups, and cloud services. After termination, the employer loses any ability to revoke access or audit the data, while personal accounts often lack multi-factor authentication and strong password practices. Russian legislation including Federal Law No. 152-FZ on personal data, the Labor Code, and Federal Law No. 98-FZ on trade secrets requires proper protection of sensitive information. Using work email for shopping, banking, or password recovery exposes the corporate domain to phishing and leaks, while the reverse creates dependency on private accounts for business continuity. The recommended practice is strict separation with unique passwords, MFA on both accounts, and approved corporate channels for file transfer.