Recent strikes by Ukrainian drones on Yandex data centers have led to a significant drop in Russian bot traffic. Ukrainian President Volodymyr Zelensky has indicated these actions are in response to Russian attacks on Ukrainian data facilities. The strikes targeted three sites belonging to Yandex, Russia’s prominent technology company, having a ripple effect on internet services and possibly on Russia’s disinformation efforts.
Yandex Data Centers Under Attack
In early October, a notable attack occurred at Yandex’s largest data center in Sasovo, located in the Ryazan region. This center housed tens of thousands of servers along with two critical supercomputers. The extensive damage questioned the restoration feasibility of the struck equipment. Another strike followed in Kaluga City, affecting data center modules and disrupting the local internet services. Subsequently, a drone attack closed operations at the Vladimir center, which caused notable service interruptions for Russian businesses and consumers. The restoration of damaged equipment is expected to be lengthy and costly.
Russian Disinformation Campaigns Affected?
While a drop in bot traffic from Yandex’s network was noted, experts like Hadi Ghanbari suggest that disrupting these centers might not significantly impair disinformation operations. These campaigns often use alternative internet routes and proxies, maintaining their spread even amid such disruptions. However, cybersecurity experts acknowledge potential broader effects on various malicious activities, including ransomware and cybercrime operations.
Need to adapt quickly with upcoming U.S. midterms, security experts assess the impact of these data center outages could potentially shift Russian cyber operations to alternative infrastructures. Jason Vest, a digital forensic analyst, believes that while there may be temporary disruptions, Russia’s cyber capabilities remain largely unscathed in the long term.
Impact on Russian Consumers
The strikes immensely affected Russian consumers and businesses. Daily services such as transportation, digital payments, and news access faced interruptions. Particularly, Yandex Pay users encountered issues withdrawing funds. Yandex has initiated collaborations with other Russian cloud providers to alleviate these disruptions.
Data Centers in the Crossfire
The escalation in targeting data centers presents new strategic dimensions in the ongoing conflict. Both Russia and Ukraine are engaging in these attacks, emphasizing the necessity of physical protection, resilience, and data diversification. Ukraine’s proactive approach in using foreign data centers for critical data storage has potentially mitigated immediate threats to its cyber infrastructure. However, the intensifying focus on these facilities could amplify risks for security misconfigurations, thus opening vulnerabilities for exploitation.
The ongoing strategic targeting of data centers underscores a new war front, with implications extending beyond the immediate conflict area, indicating a broader cybersecurity challenge on a global scale.