The Russian Bot Apocalypse

Summary

A widely shared graph claimed that Ukrainian drone strikes on Russian data centers had caused online activity around Germany’s AfD party to collapse. The video says the chart was unreliable: it offered no source or clear explanation of what it measured, included data from future dates, and used misleading axis scaling. Its origin was traced to a Threads account, but whether AI was involved remained unproven.

The strikes did hit three of Yandex’s six major data centers, disrupting services ranging from payments and business cloud hosting to apartment-gate systems. However, the apparent collapse in “Russian bot traffic” was mostly a drop in Yandex search crawlers—not evidence that social-media influence operations had stopped. Cloudflare reported no unusual change in traffic to the social platforms on the network it monitors. The video also stresses that “bots” can mean routine automated requests as well as fake accounts, making the term potentially misleading.

The damage exposed a risk created by Russia’s data-localization policy. Keeping citizens’ data inside Russia helped insulate the country’s internet from Western sanctions, but concentrated important services in facilities vulnerable to attack. Yandex customers face disruptions and a recovery that could take months, while sanctions may make replacement equipment difficult to obtain. The broader lesson is that both digital sovereignty and reliance on foreign providers involve risks; resilience requires sufficient redundancy across genuinely separate locations.

Influence operations are not based solely in centralized troll farms. Operators can use rented residential internet connections, malware-infected devices, and phone farms to make accounts appear more authentic. The video cites botnets that hijacked home computers and consumer devices, as well as a Latvian SIM farm whose cards were used to create millions of accounts. Cheap Android TV boxes are a particular vulnerability: some arrive with malware, and weak or default passwords can make them easy to compromise.

Governments are among the customers for online influence campaigns. The video describes a Russian operation that used software to create fake social-media profiles, while noting that manipulation campaigns have also been linked to governments in China, Iran, Saudi Arabia, and Western democracies. The existence of such campaigns does not, by itself, establish how much they affect votes or public opinion.

Much political engagement, however, comes from people pursuing advertising revenue rather than government agendas. The video describes operators in Sri Lanka and elsewhere who target Western audiences with provocative political posts because advertising pays far more for views from the US, UK, and Canada. Platforms’ engagement-based monetization can reward outrage, regardless of whether content is accurate or ideologically consistent.

Research discussed in the video suggests that ordinary users—not just bots—are central to the spread of false and inflammatory material. A study of Twitter posts found that false stories spread faster and farther than true ones even after bots were excluded, apparently because they provoke surprise and disgust. Another study found that a small share of users accounted for most fake-news sharing. The video also highlights research suggesting that widely viewed, legitimate news stories raising doubts about vaccines could have a greater effect on hesitancy than fact-checked misinformation.

Finally, the video discusses Anthropic researchers’ tests of AI models on inexpensive Android devices. The models were slow, and the researchers said it could be months before small models could independently replicate across devices. However, they found that compromising simulated devices was easy when those devices had no password. The potential threat is a decentralized, persistent network that would be difficult to eliminate with a single strike. Suggested defenses include improving device security, banning default passwords, and having internet providers isolate infected devices.

Presenters and contributors

• Patrick Boyle — Presenter and narrator
• Christophe — YouTuber whose research on engagement-driven political content is discussed
• Ned Mendez — Quoted on bot farms and phone farms
• Angus Bridgeman, Jennifer Allen, Duncan Watts, and David Rand — Researchers whose studies are discussed in the video