Russian Bot Farms Remain Active Despite Drone Strikes on Yandex

Overview

Days after Ukrainian military drones struck several Russian data centers, President Volodymyr Zelenskyy declared a victory over online disinformation. He celebrated that social media platforms had become "a little easier to breathe" on, citing a reduction in hate, division, and provocations. The strikes targeted infrastructure belonging to Yandex, Russia’s largest technology conglomerate, which operates critical web services and search engines.

However, initial claims that the drone campaign successfully disrupted Russian bot farms appear to be premature and potentially misleading. Data from independent monitors and digital analysts suggests that state-sponsored disinformation activities remain steady. While the physical damage to Yandex’s infrastructure may have impacted web crawling capabilities, there is no conclusive evidence yet that it has dismantled the political operations running behind it.

Analyzing the Claims of Reduced Disinformation

The narrative of a quieter internet emerged quickly following the aerial attacks. President Zelenskyy took to social media to highlight what he described as a tangible decrease in toxic online behavior. His assessment aligned with observations from various social media users who claimed to see a drop in traffic from specific political accounts.

Some users reported noticing less engagement from MAGA-affiliated accounts and those linked to the far-right Alternative for Germany (AfD). Others alleged a steep decline in spam calls and automated messages, suggesting that the kinetic strikes had successfully severed the logistical support for these digital campaigns.

"It suddenly became a little easier to breathe on many social platforms. There was less hate, less division, and fewer provocations." — President Volodymyr Zelenskyy

These claims, however, have drawn sharp criticism from experts in the field of information security. The correlation between physical infrastructure damage and the cessation of sophisticated disinformation campaigns is not as straightforward as it appears. The operational structures of bot farms are often decentralized, resilient to single points of failure, and capable of rapid migration to alternative hosting providers.

Evidence Contradicting the Success Narrative

Independent monitoring efforts paint a significantly different picture than the one presented by the Ukrainian presidency. Antibot4navalny, an account dedicated to tracking state-sponsored troll farms, reported that bot traffic remained constant in the days following the strikes. On the same Monday that Zelenskyy announced the decline in disinformation, the monitor noted that several Kremlin-aligned accounts were actively posting content.

This content included videos falsely claiming that experts were demanding the European Union lift ongoing sanctions against Russia. The continued activity of these accounts indicates that the core machinery of Russian influence operations remains functional and undisturbed.

Furthermore, Valdemar Osted, a Danish analyst specializing in digital threats, provided quantitative data that contradicts the notion of a decrease in activity. His analysis showed that interactions on both MAGA and AfD accounts have actually increased since the drone strikes occurred. This suggests that rather than being disrupted, these networks may have adapted or even intensified their efforts.

The Role of Misinformation and AI-Generated Data

Perhaps the most concerning aspect of this episode is the potential for the success narrative itself to be a form of disinformation. If claims about the effectiveness of the strikes are exaggerated or fabricated, they serve a strategic purpose that goes beyond mere optimism. They could be designed to boost domestic morale or project an image of strategic success on the international stage.

The evidence supporting the claim of reduced bot activity appears to be flawed. Charts that were circulated to demonstrate a decline in bot activity have been identified as likely AI-generated. This raises serious questions about the credibility of the data being used to justify the celebration of the drone campaign’s impact on information warfare.

The use of synthetic data to support a political narrative highlights the murky intersection of kinetic military action and digital propaganda. When the metrics used to measure success are themselves potentially artificial, it becomes difficult to assess the true impact of operations like the Yandex strikes.

Technical Impacts vs. Operational Resilience

It is important to distinguish between technical disruptions and operational failures. The drone strikes likely caused significant damage to Yandex’s data centers, which could have affected web crawlers and general internet service reliability for Russian users. However, the infrastructure that supports bot farms is often separate from the public-facing search and cloud services provided by a company like Yandex.

Bot farms rely on a complex ecosystem of compromised devices, virtual private servers, and specialized software. Disrupting a major tech company’s physical data centers does not automatically equate to disrupting the distributed networks that execute disinformation campaigns. These networks are designed to be resilient and can often reroute traffic or activate backup systems without noticeable interruption to their operators.

The confusion between technical downtime and strategic success may stem from a desire to see tangible results from military action. In the gray zone of information warfare, measurable outcomes are hard to come by. A struck data center is a visible symbol of damage, while a dormant bot farm is invisible. This visibility bias may lead to an overestimation of the impact of kinetic strikes on digital operations.

Conclusion: The Need for Verified Metrics

The immediate aftermath of the Yandex drone strikes serves as a case study in the challenges of verifying the effects of hybrid warfare. While President Zelenskyy’s optimism reflects a desire to see Russian disinformation weakened, the available evidence does not yet support the conclusion that the strikes have dealt a crippling blow to these campaigns.

Independent monitors like Antibot4navalny continue to track active disinformation efforts, and analyst data suggests an increase rather than a decrease in engagement from hostile accounts. The presence of potentially AI-generated charts further complicates the landscape, suggesting that the narrative of success may be partly constructed.

Moving forward, it is essential for policymakers and the public to rely on verified data rather than anecdotal observations or politically motivated assessments. The resilience of Russian bot farms indicates that physical strikes on infrastructure alone may not be sufficient to dismantle sophisticated disinformation ecosystems. A more comprehensive approach, combining technical countermeasures, diplomatic pressure, and public awareness, may be required to address the ongoing threat of state-sponsored interference.