Yandex outage likely hit crawlers, not Russia’s social troll bots

Viral Cloudflare charts were read as proof that Russian troll farms collapsed, but the data likely tracks Yandex crawlers, not social media manipulation. Operators should verify images before resharing.

What happened

Multiple Ukrainian drone strikes over the last week took Russian data centers offline and reportedly caused online bot traffic to plummet. A chart citing Cloudflare data circulated around social media platforms, showing a sharp decline in bot traffic following attacks on Yandex servers, a technology company often described as "Russia’s Google." Many people inferred that the chart referred to bot farms pushing disinformation, conspiracy theories, and harmful content across online platforms.

That inference is likely wrong. Reputed troll farm exposer antibot4navalny said on X that the chart actually measures requests from automated Yandex web crawlers and "has nothing to do with social media." These crawlers can be used maliciously to hack user accounts and target people with spam, but they are also commonly used to index websites for search engines and provide customer service support. The chart is specific to Yandex-based traffic, not bot activity from Russia at large, which remains largely unchanged around the data center attacks, according to Cloudflare.

A separate diagram shared by European Parliament member Tomáš Zdechovský claimed that online activity around the far-right Alternative for Germany (AfD) political party plummeted after the attacks. Computer scientist Raphael Wimmer suspects that diagram is AI-generated, pointing to a data point logged for a future date: October 15th. The image appears to have first been posted by Threads user Robin Schlingheider, and its data source is not established.

"Could we (and especially politicians, journalists and scientists who should know better) please stop sharing unverified images?"

Meanwhile, the vast majority of Yandex-operated systems still appear to be offline following the latest drone strike, including the Yandex Pay digital payment service. Users are unable to transfer funds, check balances, or make purchases. Yandex Fintech head Dima Pirogov said in a statement that "we can’t yet give you a precise restoration timeline, but we promise: we won’t stop until the service is restored."

Key facts

• Multiple Ukrainian drone strikes over the last week took Russian data centers offline and reportedly caused online bot traffic to plummet.
• A viral chart citing Cloudflare data showed a sharp decline in bot traffic after attacks on Yandex servers; antibot4navalny says it measures Yandex web crawlers and "has nothing to do with social media."
• Cloudflare says the chart is specific to Yandex-based traffic, while Russian bot activity at large remains largely unchanged around the data center attacks.
• Tomáš Zdechovský shared a diagram claiming AfD-related activity plummeted; Raphael Wimmer suspects it is AI-generated because it includes a future date, October 15th.
• The vast majority of Yandex-operated systems remain offline, including Yandex Pay, leaving users unable to transfer funds, check balances, or make purchases.

Our analysis

The core issue is a category confusion that travels fast on social platforms. A drop in automated Yandex crawler traffic is not evidence of reduced Russian troll activity, but the visual similarity of bot-related charts makes the wrong story easy to share. For social media managers and community operators, this matters because threat assessments, content moderation, and brand-safety decisions can be built on charts that measure the wrong thing.

This event also shows a new verification problem: AI-generated or unsourced diagrams can slip into political and media feeds with enough authority to spread. A politician sharing a chart with a future date suggests that even high-reach accounts are not checking basic internal consistency. Wimmer’s call to stop sharing unverified images applies directly to creators and operators who curate news for audiences.

Finally, the Yandex Pay outage points to a different operational reality: a payment-system failure affects users who cannot transfer funds, check balances, or make purchases. It does not imply a collapse in disinformation operations. Operators should keep infrastructure incidents separate from social media manipulation metrics; mixing them can create false confidence or unnecessary alarm.

What it means for operators

• Before resharing bot-related charts, confirm what the data actually measures: web crawlers, API requests, ad impressions, or social media engagement. If the chart does not state this, treat it as unverified.
• Check diagrams for internal red flags such as future dates, missing axes, or no named data source. If a chart may be AI-generated, do not use it in audience communications or risk reports.
• Separate infrastructure outages from social media manipulation. A payment service like Yandex Pay going offline is a user-impact story, not proof that troll traffic declined on your platforms.
• Use primary sources or named researchers such as antibot4navalny and Cloudflare statements when reporting platform risk, and label uncertainty for your team and audience.