Ukraine claims Yandex strikes silenced Russian social media bots

Ukrainian President Volodymyr Zelenskyy stated that recent military strikes on Russian data centers operated by Yandex resulted in a significant reduction of automated pro-Russian accounts on social media platforms. He made these remarks while addressing the Warsaw Security Forum via video link, connecting the physical damage to digital outcomes.

The most recent attack occurred on October 11 and reportedly disabled a facility in the Vladimir region, east of Moscow. This was the third strike on Yandex infrastructure in a short period. According to the reporting by Gizmodo, the facility was completely disabled, leading to widespread outages of internet services both within Russia and in other countries.

Context on Bot Activity Claims

Zelenskyy argued that the immediate silence of these automated accounts demonstrated their origin. He told attendees that the reduction in hate, division, and provocations on social platforms occurred because there were fewer bots operating when the infrastructure went offline. He claimed this evidence proved that Europe was not the source of these digital problems.

Euronews reported on Cloudflare data that appeared to support a decrease in traffic. The data showed a 94 percent drop in automated traffic originating from Yandex on Sunday compared to the average throughout the second half of September. However, this metric includes various types of automated traffic, such as search crawlers and uptime-monitoring tools, not just social media bots.

Global Observations and Skepticism

Users in Germany, the United Kingdom, and the United States also reported witnessing a decrease in bot activity, though these observations were based on personal perception rather than formal data. Gizmodo noted that such claims are common online tactics. Polymarket tweeted that activity on several major U.S. political subreddits plunged following the attacks, but that assertion did not include supporting evidence.

The reporting suggests that while the infrastructure damage was real, the direct link to specific bot silencing is difficult to isolate. Automated traffic metrics are broad, and user anecdotes lack verification. The disruption affected Yandex, a Russian technology company described as a hybrid of Facebook, Google, and Uber services.

What should you do?

Security professionals should monitor for unusual drops in automated traffic that may indicate infrastructure outages rather than policy changes. Organizations should verify claims about bot activity with multiple data sources before drawing conclusions. Watch for service disruptions in regions with ongoing kinetic conflicts that involve critical digital infrastructure.

What to do and how to stay safe: Yandex

• Correlate traffic anomalies with known infrastructure outages before attributing changes to behavioral shifts.
• Use diverse data sources to verify claims about automated account activity or bot traffic reductions.
• Monitor status pages and network telemetry for signs of widespread service degradation in affected regions.
• Prepare incident response plans for scenarios where digital infrastructure is targeted in kinetic conflicts.

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Did the strikes completely stop all Russian social media bots?

No, the strikes caused widespread outages and a drop in automated traffic, but a complete cessation was not confirmed.

What evidence supports the claim that bots were silenced?

Cloudflare data showed a 94 percent drop in automated traffic from Yandex, and users reported fewer bots.

Which data center was targeted on October 11?

A facility in the Vladimir region, east of Moscow, operated by Yandex was reportedly completely disabled.