Ukrainian drones struck data centers belonging to Russian tech giant Yandex over the past week. Following the strikes, Ukrainian President Volodymyr Zelenskyy claimed that there was a sudden drop in Russian bot activity and political disinformation campaigns on platforms like X. Social media users took the story — Ukraine had taken out a massive Russian bot operation — and ran with it.
However, a new report from Cloudflare, which monitors internet traffic, tells a more complicated story.
Cloudflare found that while there was some bot interruption, bot operators were able to quickly migrate their systems to alternative cloud operators and continue running undeterred. Furthermore, Cloudflare could not determine if this disruption in bot activity had any effect on social media campaigns specifically.
How did the Yandex strikes affect social media bots?
A lot of the confusion stems from the fact that people are using the word “bot” to refer to distinct types of activity.
“‘Bot traffic’ refers to automated requests to websites on Cloudflare’s network, such as crawlers and scripts, not necessarily activity on social media platforms,” said Lai Yi Ohlsen, Head of Radar, a Cloudflare monitoring tool.
So, while social commentators have used Cloudflare’s data to state that the strikes had a major effect on social media bots, that’s not quite right. Ohlsen told Mashable that “Radar does not have visibility into HTTP traffic reaching any specific customer, including X or Reddit,” and that “Radar does not have any visibility into where accounts posting on those platforms are hosted.”
In short, Cloudflare data can’t substantiate the claims that the strikes affected social media disinformation campaigns, but the company didn’t rule out the possibility entirely.
“Based on our assessment, the data does not appear to support the claims that the strikes crippled social media manipulation, though without further analysis with data outside of Cloudflare, we cannot conclusively say there is no connection,” the company said in its report.
Want to learn more about getting the best out of your tech? Sign up for Mashable’s Top Stories and Deals newsletters today.
How the Yandex drone strikes affected Russian bots
After Ukraine’s attack on the Yandex data centers, Cloudflare’s Radar service picked up a massive outage, as traffic from Yandex Search and Yandex.Cloud dropped off. Traffic from Yandex Search and Yandex.Cloud fell 99 percent and 90 percent, respectively, below the pre-attack baseline. In addition, bot activity on Yandex.Cloud dropped by 40 percent, with traffic from “attack-like categories” in particular dropping 90 percent or more.
These are big drops in traffic, but remember that a lot of that activity comes from innocuous bots, such as search crawlers.
Yandex Search and Yandex.Cloud are two very different services run by the Russian company. As Cloudflare explains, Yandex Search traffic would come mostly from “verified search crawlers indexing web pages, images, and site resources.” This is normal traffic to find from a search engine operator. Yandex.Cloud is the company’s cloud computing service, and this is where Cloudflare says it sometimes finds malicious bot traffic.
Again, Cloudflare says the drone strikes did disrupt malicious bot activity. However, the operators behind these bots merely migrated their automated systems to different cloud service providers, minimizing the disruption.
In one notable example, Cloudflare showed how the strikes impacted malicious bot activity in the gambling sector.
“Nearly all of Yandex.Cloud’s bot requests were targeted at one gambling customer account, with traffic shifting among its hostnames. Immediately following the October 8 disruption, bot requests from Yandex.Cloud to this account dropped to zero. Simultaneously, identical requests began appearing from other Russian hosting [autonomous system numbers],” the report says.
Chance Townsend contributed additional reporting to this story.
