JupiteX Get the app
Defence & Security15 Oct 2026 · about 6 min

Russian facilities were attacked. Then came a viral theory

The brief

Ukraine launched strikes on three data centres used by Yandex during one week. Yandex is often described as Russia’s version of Google. The attacks mattered because data centres support online services, including automated requests and other digital activity. The strikes damaged Yandex infrastructure. A Kremlin spokesperson said the provider was “currently facing difficulties.” Cloudflare data also showed a sharp fall in detected bot traffic after one strike, although that traffic included ordinary Yandex crawlers used to index webpages and improve search engines. The strikes therefore created a visible online effect, but their wider information impact remains uncertain. Experts found no definitive evidence that Russian misinformation declined. More research is needed to determine whether troll and bot messaging fell substantially, or whether reduced activity reflected disrupted internet access or ordinary technical operations.

01

What happened to Yandex’s data centres, and who carried out the strikes?

Ukraine launched strikes on three data centres used by Yandex during one week. Yandex is often described as Russia’s version of Google. The attacks mattered because data centres support online services, including automated requests and other digital activity.

The strikes damaged Yandex infrastructure. A Kremlin spokesperson said the provider was “currently facing difficulties.” Cloudflare data also showed a sharp fall in detected bot traffic after one strike, although that traffic included ordinary Yandex crawlers used to index webpages and improve search engines.

The strikes therefore created a visible online effect, but their wider information impact remains uncertain. Experts found no definitive evidence that Russian misinformation declined. More research is needed to determine whether troll and bot messaging fell substantially, or whether reduced activity reflected disrupted internet access or ordinary technical operations.

02

What is a bot, and how is it different from a human-run social media account?

A bot is an automated process completed online. The word is often associated with malicious actors, but automation also performs routine tasks. Search-engine crawlers, for example, visit webpages and send automated requests without spreading political messages.

The article explains that Yandex uses bots to index webpages and optimise its search engine. Social media bots can be different. They may automatically like, repost, or amplify messages. Russia also uses human-written messages, so the final activity can combine human judgment with automated distribution.

This distinction matters when interpreting traffic data. A fall in bot requests does not reveal which kind of bot disappeared. It may show fewer search crawlers, fewer amplification actions, or both. Regular users also struggle to tell whether online engagement came from a person or an automated account.

03

How many of Yandex’s main data centres were struck, and what change in bot traffic was observed afterward?

Ukraine struck three of the five main data centres used by Yandex in the past week. That gives the attacks a significant physical reach across the company’s infrastructure. The number alone, however, does not show how much political activity was disrupted.

A widely shared Cloudflare graph showed a sharp drop in bot traffic shortly after one strike. Yandex bots routinely send automated requests while crawling the internet, indexing webpages, and improving search results. Those ordinary technical bots may explain at least part of the change.

The observed drop therefore needs careful interpretation. Experts said there was no definitive evidence that Russian misinformation declined. A Polish post linking the strikes to reduced support for Germany’s AfD party used an AI-generated graph and was deleted. Similar claims still circulated widely.

04

What happens to online activity when a data centre is damaged or goes offline?

A data centre provides infrastructure for online services and automated activity. When part of that infrastructure is damaged or taken offline, systems using it may stop sending requests or operate with reduced capacity. This can change what outside services detect.

The article gives Yandex as an example. After Ukrainian strikes damaged its infrastructure, a Kremlin spokesperson said the provider was facing difficulties. Cloudflare then showed a sharp fall in bot traffic. Some of those missing requests likely came from Yandex crawlers that index webpages and optimise search engines.

The effect is therefore measurable but broad. A lower traffic count does not identify the purpose of every missing process. It may reflect disrupted technical services, reduced automation, or users’ inability to access the internet. Experts say more research is needed before connecting the change directly to reduced misinformation.

05

Why might a fall in detected bot traffic not prove that Russian misinformation had declined?

Bot traffic is a broad category. It includes routine crawlers as well as automated social-media activity. Because the same measure can contain many kinds of bots, a decline cannot by itself show that propaganda or misinformation became less widespread.

Yandex bots crawl the internet, index webpages, and optimise search engines. If Yandex data centres are damaged, those ordinary requests may decrease. A fall in online activity could also mean Russian citizens could not access the internet, rather than that Russian bot networks stopped spreading messages.

The evidence remains mixed. Experts said there has been no definitive demonstration of reduced disinformation, engagement, or problematic narratives. A graph claiming lower support for Germany’s AfD party was later found to be AI-generated. Researchers say empirical data is still needed to measure any real reduction in troll and bot messaging.

06

How does Russia combine human-written messages with automated likes, reposts and other forms of amplification?

Russia’s online approach is not purely automated. The article describes a mixed system that combines deliberate human messages with automated amplification. This matters because a message can be written by a person but distributed through automated accounts.

Human actors may create carefully designed posts or narratives. Automated accounts can then retweet, like, or otherwise amplify those messages. The resulting engagement may make a view appear popular without revealing whether people or software generated the activity.

That mixture complicates investigations into online influence. Researchers cannot simply count bots and assume every automated request carries disinformation. They must separate technical crawlers, automated amplification, and human participation. The article says it is very hard for ordinary users to identify the source of engagement, especially when liking and reposting are involved.

07

Why does physical infrastructure such as data centres matter to the way information spreads online?

Online information appears intangible, but it relies on physical infrastructure. Data centres host and connect services that send requests, process activity, and support communication. If that infrastructure is damaged, the digital activity connected to it can be interrupted or reduced.

The Yandex strikes illustrate this link. Three of the company’s five main data centres were hit, and a Kremlin spokesperson acknowledged difficulties. Cloudflare observed sharply lower bot traffic afterward. That traffic included Yandex crawlers, while some social-media amplification may also have been affected.

Physical disruption does not automatically equal an information victory. The available evidence cannot show how much misinformation changed. Still, the strikes created an opportunity for a natural experiment. Researchers can compare activity before and after the attacks to study how infrastructure affects bot networks, engagement, and information flows.

This brief was written by AI from the original reporting and checked by other models. Names, figures and quotes come from the source; read it for full context.

Read more in the JupiteX app

Pulse is free. New stories every 4 hours, each one broken into the questions that explain it.

Or read more news on the web