F6 and MAX Neutralize Over 2,550 External Phishing and Scam Resources in Two-Month Operation

F6 and the MAX messenger have jointly blocked more than 2,550 malicious external websites used for phishing, scams, and other forms of online fraud. The effort relied on the F6 Digital Risk Protection platform, which continuously scans for fake authentication pages and fraudulent resources targeting users. Monitoring took place during July and August 2026, after which experts from both organizations arranged for the sites to be taken down. The action focused exclusively on external resources and did not involve any malicious content hosted inside the MAX messenger itself. F6 Digital Risk Protection head Stanislav Goncharov noted that regular takedowns can reduce attacker activity over time, yet users must still verify website addresses manually before entering credentials or payment data.

AntiMalwareTranslated from Russian

Read at source

F6 and the MAX messenger have launched a joint initiative to protect users from phishing, scams, and other types of internet fraud. Over the first two months of cooperation, specialists identified and neutralized more than 2,550 external malicious resources.

Monitoring was conducted in July and August 2026 using the F6 Digital Risk Protection platform. The system searches for websites and other resources that attackers employ to target customers of companies and users of their services. In the discovered schemes, fraudsters lured victims to fake authentication pages under various pretexts.

Once on these pages, users entered login credentials, passwords, or payment details that were sent to the attackers instead of the legitimate service whose logo appeared on the page. After detection, F6 experts and the MAX Security Center worked to have the suspicious resources blocked.

The companies emphasize that the 2,550 resources were external sites threatening platform users and were not malicious elements located inside the messenger itself.

According to Stanislav Goncharov, head of the Digital Risk Protection department at F6, regular searches and blocking of fake resources can first reduce fraudster activity and later help dismantle brand-related schemes. However, blocking alone does not replace user caution. Phishing pages can appear faster than their predecessors are removed, and a familiar logo does not make a fake form legitimate. Therefore, users should continue to verify website addresses manually before entering any data.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Fraud & Social Engineering

Scammers Use *#62# USSD Command to Fabricate Surveillance Claims and Steal Victims' Funds
Aroshka Cloud Faces Scrutiny Over Alleged False Claims of SOC 24/7 Operations and High-End Infrastructure
Reports Surface on Alleged De-Anonymization of Admins Running Major Russian Hacker Forums