logo

Yandex outage: Data shows that instead of going dark, malicious bots went on the move

ID: 5aac51b5-9e0b-565a-96a5-0d3f9b3a921a

STIX ID: report--5aac51b5-9e0b-565a-96a5-0d3f9b3a921a

Feed Name: Cloudflare Blog

Threat Score
45/100

Date Published: 2026-10-14

Date Updated: 2026-10-18

Author: Marina Elmore

...
...

Cloudflare analysis of reported strikes on Yandex data centers shows that search indexing (AS13238) largely stopped because verified crawlers went offline, while malicious automation on Yandex.Cloud (AS200350) temporarily declined but quickly migrated to other Russian hosting providers. The report demonstrates that overall HTTP traffic drops do not prove disruption of influence operations or botnets: behavior-based signals (shared JA4 TLS fingerprints, uncommon request paths, identical User-Agents) indicate operators moved workloads to alternate ASNs and high-volume malicious activity persisted.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.