Russian Connections

When your wifes mobile starts running off and behaving in a manner that is not normal you tend to start asking questions - especially in this day and age.

Basically it blew the network baseline right out of the water. Stuff like that gets my attention.

Device immediately put in a restricted VLAN.

So what was it and why. Luckily it turned out to be an application on her mobile.

The connection to yandex.ru likely stems from the fact that Vita Mahjong 2025 is hosted on Yandex Games, a Russian gaming platform. The developer listed is Luchshie Avtomaty, which translates to “Best Slots” in Russian—suggesting the game may be developed or published by a Russian-based entity. Here’s why it might be connecting to Russian infrastructure: - 🕹️ Platform Hosting: If you’re playing the game through Yandex Games, all assets, user data, and gameplay traffic would naturally route through Yandex’s servers. - 🌍 Localization & Audience: The game supports Russian language and features Russian player rankings, which further confirms its regional targeting. - 🔗 Cloud Saves & Login: Yandex Games offers cloud saves and social features, which require connections to their infrastructure for syncing progress and leaderboards.

Malicious - not likely.

PCAP files saved, troublesome situation diverted.

#enoughsaid