Ukraine and Russia emergency apps hit by cyberattacks sending false alerts
Mobile emergency applications in Ukraine and Russia suffered contemporaneous cyberattacks over the weekend of November 1 and November 2, according to reports.
Ukraine Air Alert App Sends False Nuclear and Chemical Warnings
Late on November 1, users of Ukraine’s primary Air Alert mobile application received unauthorized notifications warning of severe radiation and chemical threats in Kyiv, alongside alerts predicting street combat and referencing Russia’s Oreshnik missile, according to reports. Some of the fraudulent notifications appeared in Russian and included external links to a Telegram channel. The false warnings reached users around 10:45 p.m. local time, prompting widespread concern before officials intervened.
Ukraine’s Air Force posted a statement on Telegram late Sunday confirming that the app had fallen under unauthorized enemy influence, explicitly stating that no radiation threat existed. Yurii Ihnat, a spokesman for Ukraine’s air force command, told private broadcaster 1+1 that the breach did not compromise core military command systems or national defense operations. Developers temporarily suspended the application overnight, disabled push notifications, and began rolling out a restored version early on November 2 that displayed verified danger levels while keeping map displays offline.
Ukraine’s Center for Strategic Communications blamed Russia for the incident, citing the use of the Russian language in the distributed text. Meanwhile, Mash, a Russian Telegram channel linked to security services, reported that a group named Hitcore claimed responsibility for the breach, though that claim could not be independently verified.
Russia Reports Massive Cyberattack on Emergency Ministry App
Hours after the Ukrainian breach, Russia’s Ministry of Civil Defence, Emergencies and Disaster Relief announced on November 2 that its own mobile alert application had been targeted by a massive cyberattack. The compromised Russian application wrongly notified users of imminent drone strikes across selected regions.
Russian emergency officials moved quickly to reassure the public that the broader national alert infrastructure remained fully operational. The ministry stated that the compromised mobile app functioned merely as a supplementary service alongside standard communication channels, which include SMS broadcasts, municipal loudspeakers, and traditional sirens.
The digital disruptions in both countries unfolded immediately following the conclusion of a localized humanitarian ceasefire in the Russian-occupied Kherson region. That truce, which began on October 27 and was brokered with diplomatic assistance noted by the White House, marked a rare pause in fighting nearly five years into the full-scale conflict.
Alternative Channels Remain Operational
Both Ukrainian and Russian authorities stressed that secondary emergency notification methods continued to function normally while the affected applications were secured. Ukraine’s Digital Transformation Ministry noted that sirens across the country remained active and that separate municipal platforms, such as the Kyiv Digital application, operated without interruption. Citizens in both nations were urged to rely on official social media channels, verified broadcast feeds, and physical warning sirens while technical teams investigated the source and scope of the intrusions.