AntiMalwareJuly 27, 2026🇷🇺Translated from Russian

Yandex Rolls Out Universal Anti-Fraud Platform to Block Bots and Manipulation Schemes

Yandex has started rolling out Universal Anti-Fraud, a unified AI platform intended to combat bots, ticket manipulation, and other forms of digital fraud across its ecosystem.

The new system allows protection to be connected to any service in just two to four days, a sharp reduction from the several months previously required to develop individual solutions for each product.

Dozens of Yandex services are already integrated, including Eda, Afisha, Puteshestviya, and applications featuring the Alice AI assistant.

Although attack scenarios differ by service, the core objective remains the same: fraudsters attempt to deceive algorithms for financial or other gain.

In Afisha, the platform detects bots that mass-book tickets for popular events, enabling scalpers to manufacture artificial scarcity before reselling the tickets at inflated prices on secondary markets.

In Eda, the anti-fraud module reviews support requests and has become more than ten times more effective at identifying and blocking repeated fraudulent complaints about the same order aimed at securing compensation.

The underlying technology combines neural networks, analytical methods, and over one hundred rules describing major attack classes. The platform processes traffic in real time and tunes protection parameters individually for each connected service.

Its principal strength lies in centralized updates: when Yandex identifies a new fraud scheme, the corresponding defenses are rapidly propagated to every linked product, allowing the system to stay ahead of evolving threats.

Related articles

AntiMalwareFraud & Social Engineering

Beeline Subscribers Targeted in Mass SIM Hijacking via Remote eSIM Issuance

Beeline customers have encountered widespread attempts to hijack mobile numbers through unauthorized remote issuance of eSIM cards. Attackers required only a single careless confirmation from the user to complete the takeover, bypassing traditional SMS or push notifications. The scheme presented a system-level prompt on the smartphone screen requesting login to the operator's personal account, after which a virtual SIM was issued and the physical card blocked. One victim was Kommersant FM editor-in-chief Vladislav Viktorov. Specialist Alexander Baulin suggested possible infrastructure compromise at the operator, though Beeline denied this and described the incident as a coordinated attack on remote SIM issuance mechanisms. The company stated it repelled the assault, with only isolated successful hijackings occurring, and is assisting affected users. Similar attacks have impacted the entire telecom market since the start of the year, enabling fraudsters to access banking apps, government services, and other accounts tied to the number.

HabrFraud & Social Engineering

Protecting C-Suite Leaders: Defending Executives Against Targeted Cyberattacks

According to PT EdTechLab data, 12% of registered data leaks in Russia originate from attacks on top management. Executives often combine maximum privileges with lax cyber hygiene and public visibility, creating high-value targets. The article outlines three primary attack scenarios: targeted whaling phishing with deepfakes, compromise of personal devices used for both work and private tasks, and account takeover via weak passwords or SIM swapping. Detailed recommendations include mandatory multi-factor authentication, separate corporate devices or MDM solutions, EDR coverage, strict password policies, and network segmentation. The piece stresses that technical measures must be paired with direct communication using business impact language to secure executive buy-in and set an example for the wider organization.

Security NEXTFraud & Social Engineering

IPA Reports Record High Fake Warning Scam Consultations in Q2 2026

The Information Processing Promotion Agency (IPA) recorded 3,832 personal security consultations in the second quarter of 2026, marking an 8.5 percent increase from the previous quarter. Fake warning scams, which display fabricated malware alerts to frighten users into contacting fraudsters, rose sharply to 1,428 cases, a 23.7 percent jump and the highest figure in two years. These scams carry risks of financial loss and device compromise through fake support services. Consultations dipped temporarily after arrests in May 2025 but have now exceeded levels seen before those arrests. Phishing reports also increased slightly to 146 cases, including schemes impersonating the National Tax Agency. The trend of rising fake warning incidents has continued for three consecutive quarters, underscoring the need for ongoing public vigilance.

AntiMalwareFraud & Social Engineering

macOS Users Encounter Phishing and Scams More Often Than Windows Users but Adopt Fewer Protections, Kaspersky Study Reveals

A new study from Kaspersky Lab shows that macOS users report higher rates of phishing encounters and various scams compared to Windows users, yet they are less likely to implement basic security measures. Over the past year, 12 percent of macOS users faced phishing attempts versus 9 percent of Windows users, while 16 percent encountered investment fraud schemes compared to 13 percent. Privacy violations and personal data theft were also reported more frequently by Mac owners at 11 percent and 12 percent respectively, against 8 percent and 7 percent for Windows. Security habits differ notably, with only 51 percent of macOS users avoiding suspicious links and emails versus 62 percent of Windows users, and just 35 percent installing additional protection tools compared to 42 percent. Password practices and multi-factor authentication usage follow the same pattern, with Mac users trailing in creating unique or complex passwords and enabling 2FA. Kaspersky notes that while macOS built-in defenses handle many threats effectively, they offer limited protection against social engineering and platform-specific attacks, underscoring that the Apple brand does not serve as automatic security.