Серверы уничтожены, но боты остаются: почему вредоносные сети продолжают работать

Ukraine’s strikes on Yandex data centers disrupted parts of Russia’s digital infrastructure. Yet the impact on malicious bot activity proved surprisingly small. According to Cloudflare, attackers quickly shifted their operations to alternative hosting providers, including Radist and Selectel.

Cloudflare tracked suspicious activity targeting gambling accounts for one customer. Requests from Yandex.Cloud fell to zero, but the overall volume rose from 167.7 million to 170.1 million in a week. That represents a 1.4% increase, despite the infrastructure damage.

Social media manipulation also showed little change. Traffic from Russian IP addresses declined by just 0.6%. Automated actions involving posts, replies, and likes dropped by 5.7% on one platform.

These figures challenge the idea that damaging data centers can stop coordinated online manipulation. The physical infrastructure took a hit, but the operators found other places to run their bots.

Why Bot Networks Remain a Threat to Everyone Online

Cloud services make it relatively easy to move workloads between providers. When one hosting network becomes unavailable, operators can redirect their activity elsewhere within hours. That flexibility makes malicious automation difficult to contain through infrastructure strikes or IP blocking alone.

Our Take 

This case highlights a wider cybersecurity problem. Disrupting servers can slow malicious campaigns, but it rarely guarantees their disappearance. For you, that means fake engagement, coordinated spam, and manipulative content may continue even after a major infrastructure attack.

Platforms need stronger detection systems that identify suspicious behavior across networks, rather than relying only on IP addresses or hosting locations. Readers should also check sources carefully before sharing sensational claims online.

Share this article with anyone interested in cybersecurity and digital misinformation, and explore more of our technology coverage for further insights.