One of the reasons for the recent outage of the Russian internet segment could be a virus infection of foreign equipment at hub stations. This was stated in an interview with "Parliamentary Newspaper" by the Chairman of the Board of the Digital Economy Development Fund, German Klimenko.
Klimenko, based on the nature of the failure, noted that most likely, something extraordinary happened in the operation of some hub station where traffic exchange occurs. This could be some actions by Roskomnadzor on servers, system errors, external influences, and even the consequences of using infected equipment.
Perhaps the virus came to the traffic exchange point between servers, and they simply could not reach them for some time. Perhaps the foreign Cisco equipment that we have in large quantities turned out to be infected — routers, modules, network equipment, and so on. The scale of the problem indicates this. Something was clearly happening at a global, infrastructural level. Most likely, something really happened on the routers, and a situation arose resembling traffic jams in a big city: the shops are open, but you can't get to them because all the roads are blocked. But who caused this impact, due to which the RuNet "fell", it is not yet possible to say — this can equally be the result of the actions of some malicious forces, as well as someone's mistake.
For example, according to Klimenko, a few days before the failure, a new version of some critically important software could have appeared in the system, where an error crept in. But the expert notes that it is too early to draw conclusions: "all this is just speculation at the moment", which "can be made based on one's own observations". And the official cause of the failure will be announced later.
RuNet Failures
The global RuNet failure occurred last Tuesday, January 14. The Russian segment of the Network "went down" almost completely: from "Gosuslugi" to banking applications, social networks and messengers, excluding Telegram.
Due to problems in the operation of the RuNet, car sharing also stopped working. According to users of short-term car rental services, drivers had problems with access to the application, and allegedly even lost control of the car directly while driving. However, car sharing services deny information that the global Network failure affects the stopping of a rented car.
The failure became the second in 2025: on January 6, Russians also faced difficulties when using social networks, search engines, gaming platforms, Google resources, communication operators' accounts and banking platforms. Then Roskomnadzor stated that the reason was an accident on the main network of one of the communication operators.
Major failures of the Russian segment of the Network for various reasons also occurred in the past 2024, the largest of which occurred at the end of January. Then the Ministry of Digital Development stated that the global fall of sites was associated with problems with DNSSEC — a protocol responsible for the safe redirection of addresses upon request. This is a technology that protects against the substitution of a response from a DNS server by an attacker and uses digital signatures of domain zones. It protects any site from cyberattacks, and the user — from going to a fraudulent site instead of the original site. The Coordination Center for Domains .RU/.РФ later explained that imperfect software was to blame for the DNS resolution errors of domains hosted in the .RU zone.
Exercises on "Disconnection"
It is known that Russia has been conducting annual exercises on "turning off the international internet" for several years to check, as provided for by the decree of the Government of the Russian Federation of October 12, 2019. The schedule of exercises is agreed with the Ministry of Digital Development and the FSB, and Roskomnadzor is in charge of them.
During the exercises, together with communication operators, the effectiveness of the key replacement infrastructure is identified in the event of a deliberate disconnection from the outside of the Russian segment of the Internet and information systems are identified whose operability depends on communication with services, libraries and other resources located in foreign communication networks.
According to Roskomnadzor, the latest such exercises were held at the beginning of December 2024. However, such exercises never affected the RuNet.
Read materials on the topic:
RuNet failure: "ERA-GLONASS" continued to work in normal mode