Ukraine Hit Yandex Data Centers, but Russia's Bot Farms Kept Running
Ukrainian military drones took down several Russian data centers belonging to technology company Yandex. The Verge reported the operation on Oct. 13.
President Volodymyr Zelenskyy claimed Monday the drone campaign hurt Russia's disinformation efforts. He said there was "less hate, less division and fewer provocations" on social platforms. He made the remarks to participants of the Warsaw Security Forum, with the Ukrainian presidency publishing the address on Oct. 12 at 17:05.
The technical damage was narrower. According to the same Oct. 13 reporting, the strikes affected Yandex's web crawlers, not Russian disinformation or political operations. Crawlers are automated programs that scan pages to keep search indexes fresh. Crawlers and influence infrastructure run on different stacks, with different hosting, automation and distribution paths. Bot traffic did not dip.
The account antibot4navalny, which tracks state-sponsored troll farms, reported that Russian bot traffic remained steady after the strikes. The Verge cited that assessment in its article titled 'Russian bot farms are still trolling, even after Ukraine's drone strikes on Yandex'.
Other signals pointed in the same direction. Kremlin-aligned accounts posted videos falsely claiming experts are demanding the European Union lift sanctions on Russia. Danish analyst Valdemar Osted said interactions on MAGA-affiliated and AfD accounts increased since the strikes. Charts purportedly showing a decline in bot activity after the Yandex outage appear to be AI-generated.
The disinformation network known as Matryoshka was still active on Tuesday after Ukraine's drone strikes. Mother Jones reported that continuity on Oct. 13.
That persistence fits prior reporting on Russian operations in Europe. Officials said in August that Russia stepped up its online disinformation campaign in Poland by exploiting a dispute between Warsaw and Kyiv. Reuters reported that escalation on Aug. 14. Russian-backed disinformation campaigns also escalated in Germany ahead of state elections, with security sources describing the increase in early August. Reuters reported that development on Aug. 6.
The U.S. record adds two other reference points. The U.S. Justice Department disrupted a Russian government-backed, AI-enabled propaganda campaign that used a bot farm, an action reported in July 2024. Reuters covered that disruption. On Oct. 7, the U.S. State Department lobbied Canada and European allies to withdraw support for an anti-disinformation initiative. Reuters reported the lobbying effort.
The broader context here is a familiar failure mode in incident analysis, conflating visible infrastructure loss with adversary capability loss. A search crawler outage is measurable in crawl rates, index freshness and bot user-agent volume. An influence operation is measurable in account creation, posting cadence, amplification networks and cross-platform seeding. One can drop while the other holds steady, particularly when operators use offshore hosting, compromised accounts and commercial proxy infrastructure rather than domestic data centers.
In my view, worth flagging is how quickly synthetic evidence filled the gap. AI-generated charts of a supposed decline circulated alongside authentic outage data, giving a tactical strike the appearance of a strategic information effect. For practitioners, the lesson is procedural. Verify crawler logs separately from troll-farm telemetry, and treat viral charts as untrusted until the data source and collection method are known. Kinetic effects on servers do not automatically translate into quieter feeds. The feeds stayed loud.
