Simultaneous Hacks of Russian and Ukrainian Alert Apps Spread Fake Nuclear Warnings

Key points

• Ukraine’s Air Force confirmed its 'Air Alert' app was compromised, sending false warnings of nuclear and chemical threats to Kyiv and other areas before push notifications were temporarily disabled.
• Russia’s Ministry of Emergency Situations reported a 'massive cyberattack' on its mobile app, resulting in fake alerts being sent to 33 regions, including a message claiming nuclear warheads were launched.
• Ukraine’s Center for Strategic Communications blamed Russia for the hack, citing a message in Russian about the Oreshnik missile, while Moscow did not immediately identify the perpetrator.
• The cyberattacks coincided with the expiration of the longest local ceasefire since the full-scale invasion began, in the Russian-occupied city of Oleshky, which allowed humanitarian aid and evacuations.
• Both countries emphasized that their broader alert systems, including sirens and broadcasts, remained operational, and officials urged the public to ignore the fake messages and rely on official channels.

Background

This incident follows a period of heightened tension in the Russia-Ukraine conflict, including the expiration of a six-day humanitarian ceasefire in Oleshky, Kherson region, which allowed for the evacuation of hundreds of civilians and the delivery of aid. The ceasefire, brokered with the help of US First Lady Melania Trump and Pope Leo XIV, was the longest local pause in fighting since the full-scale invasion began in early 2022. Both sides accused each other of using the ceasefire to reinforce military positions, and fighting is likely to resume. The cyberattacks also occurred as the US Special Envoy Steve Witkoff announced that working-level negotiations between Ukraine and Russia would take place in Abu Dhabi from November 10 to 11, and as Ukrainian President Volodymyr Zelenskyy reported that October was the deadliest month for Russia since the invasion began, with 54,400 troops killed or badly wounded.

How outlets are covering it

CNBC reported that the incidents were not immediately clear if linked, and that both countries were trading strikes on each other’s territories and infrastructure. CNN emphasized that the fake messages had little impact on war-weary civilians and instead generated memes, while also noting that some users had deleted the apps due to distrust. BBC highlighted that Ukraine’s Center for Strategic Communications blamed Russia for the hack, while Russia’s emergencies ministry downplayed the significance, stating that the app was 'only an additional, ancillary news service' and that the broader alert system was operating normally. All three sources agreed that the incidents exposed significant vulnerabilities in critical civilian infrastructure during the ongoing conflict.

Why it matters

The simultaneous cyberattacks on emergency alert apps in Russia and Ukraine highlight the growing threat of information warfare and the vulnerability of critical civilian infrastructure during the ongoing conflict. The incidents could undermine public trust in official warning systems and create confusion during a real emergency. The timing, coinciding with the expiration of a humanitarian ceasefire, suggests that the attacks may be part of a broader strategy to disrupt peace efforts and escalate tensions. The incidents also underscore the need for robust cybersecurity measures and the importance of having multiple channels for emergency alerts to ensure public safety.

What to watch

Ukraine’s Air Raid Alert project is gradually restoring its app, with new alert levels currently available, and the team is taking additional measures to secure the app to prevent similar situations in the future. Russia’s emergencies ministry stated that its app is currently operational and that full functionality will be restored by the end of the day, and that specialists have analyzed the incident and identified the vulnerability exploited by the attacker. Both countries are likely to continue trading strikes on each other’s territories and infrastructure, and the US is expected to mediate working-level negotiations between Ukraine and Russia in Abu Dhabi from November 10 to 11. The incidents may also lead to increased scrutiny of cybersecurity measures and the development of more robust emergency alert systems.