The Yandex Leak: How a Russian Search Giant Uses Consumer Data
No ratings
Presented at BlackHat USA 2023 by
In late January 2023, almost 45 GB of source code from the Russian search giant Yandex was leaked on BreachForums by a former Yandex employee. While the leak itself did not contain user data, it reportedly contained the source code for all major Yandex services, including Metrika, which collects user analytics through a widely used SDK, and Crypta, Yandex's behavioral analytics technology. While there has been lots of speculation about what Yandex could do with the massive amounts of data it collects, this is the first time outsiders have been able to peek behind the curtain to confirm it, and what we've found is both fascinating and deeply unsettling.