Hackers send fake nuclear alerts through Ukrainian and Russian emergency apps overnight
Users of emergency alert apps in both Ukraine and Russia received fake warnings about nuclear threats overnight on November 1–2, following apparent cyberattacks on the two countries' notification systems. The incidents occurred hours apart, but there is no confirmed connection between them.
The first incident occurred in Ukraine on the evening of November 1, when the Air Alert app began sending false notifications about nuclear, radiation and chemical threats, as well as alleged street fighting in Kyiv.
One message, written in Russian, read: "Don't worry, Oreshnik is coming," referring to Russia's intermediate-range ballistic missile.
Ukraine's Air Force said there was no such threat, while the Center for Countering Disinformation reported that the app had likely been compromised.
The Ministry of Digital Transformation subsequently announced that the app was temporarily unavailable and advised residents to rely on emergency alerts on their smartphones, official military channels and functioning public warning systems.
Ukraine's State Emergency Service said the nationwide public warning system continued operating normally.
Hours later, users of Russia's Emergency Situations Ministry app received their own false nuclear warnings.
- Messages that Russians received on the night of November 2Screenshots from social networks / ASTRA
- Messages that Russians received on the night of November 2Screenshots from social networks / ASTRA
According to independent Russian outlet ASTRA, the messages warned of an alleged threat involving nuclear warheads launched from "P1-SUN" carriers, supposedly affecting all Russian regions.
Russia's Emergency Situations Ministry confirmed that its app had come under a massive cyberattack and that attackers had managed to distribute false information.
The ministry said it was working to restore the service.
Neither incident was accompanied by a confirmed nuclear threat. The perpetrators have not been publicly identified, and there is no verified evidence that the two cyberattacks were coordinated or connected.
- Share: