Hermes Vector

Tech

Cyberattacks target emergency alert systems in Russia and Ukraine

Fake warnings of nuclear and chemical threats were broadcast via mobile alert applications in both Russia and Ukraine following cyberattacks.

By Hermes-Vector AI Desk

Also in: Español · Português · Français · Deutsch · हिन्दी

Checked against 5 sourcesfrance24.comkyivindependent.comintelligentciso.comtimesofisrael.comhurriyetdailynews.com
Illustration for: Cyberattacks target emergency alert systems in Russia and Ukraine

In brief

  • Fake nuclear and chemical warnings were sent to users via mobile alert apps in both Russia and Ukraine.
  • President Zelensky confirmed Ukraine conducted retaliatory hacks against Russian systems following the attacks on Ukraine.
  • Experts warn that targeting emergency apps is designed to create public panic and undermine trust in government institutions.
  • Both nations reported that their primary warning infrastructures, such as sirens and radio, remained operational.

Cyberattacks target emergency alert systems in Russia and Ukraine

Emergency alert systems in Russia and Ukraine were hit by cyberattacks overnight, resulting in fake warnings of possible nuclear strikes being broadcast to users in both countries. While the systems have since been brought back under control, the identity of those responsible remains unclear.

Incidents in Ukraine and Russia

On the evening of November 1, Ukraine's Air Alert app, which provides updates to citizens regarding incoming Russian strikes, was hacked. The app distributed false warnings concerning chemical threats, public disturbances, and dangerously high radiation levels in the capital, Kyiv. According to reports from The Times of Israel and Hurriyet Daily News, these messages were written in a mix of Russian and Ukrainian, as well as in English with spelling and grammatical errors. One false warning in Russian on the app stated, "Hi! A nuclear alert is about to go off all across Ukraine! Don't worry, the Oreshnik is on its way."

Ukraine's air force stated the app had likely been compromised by hostile actors, and the service was temporarily suspended. The country's emergency service confirmed the national warning system remained operational and advised citizens to follow official loudspeaker announcements.

Hours after the incidents in Ukraine, Russia's own air raid alert system showed signs of being compromised. Messages were sent to users claiming "nuclear warheads" had been "launched across all regions of Russia," and that users should "stock up with food for three weeks" and hide in their basements. The Russian Ministry of Civil Defense, Emergencies and Disaster Relief issued a statement saying, "Attention! The Russian Ministry of Emergency Situations' mobile app has been subjected to a massive cyberattack, allowing attackers to send fake information to the public."

Russian authorities stated they were working to address the vulnerability but emphasized that the primary public warning infrastructure—including sirens, loudspeakers, SMS messages, television, and radio broadcasts—remained unaffected.

Retaliation and Attribution

President Volodymyr Zelensky confirmed on November 3 that Ukraine targeted Russian emergency alert systems in retaliation for the attacks on Ukraine. "I underlined it several times that we only respond to their attacks," Zelensky told PBS NewsHour. "So, of course, after the attack, when it was very clear to all our people and for all our personnel, and the intelligence, that it's [Russia's] personal attack against our people, civilians, of course, we responded."

Regarding the hack on the Air Alert app, Zelensky stated, "It was a cyber attack... Of course, they want each day to make chaos in Ukraine, in all our cities. It's one of such steps by Russia."

While a Russian Telegram channel claimed to have spoken to representatives of the hacking group Hitcore, who allegedly claimed responsibility for the attack, this claim could not be independently verified.

Expert Analysis

Cybersecurity experts noted that these attacks exploit trusted public services to spread confusion. Dr. Melanie Garson, Associate Professor in International Security at University College London, stated that these types of attacks "are designed to undermine faith in the government's ability to provide trust."

Graham Taylor CBE, Director Defence Strategy for Northern Europe at OPSWAT, described the incidents as "evidence of grey zone activity, where attribution is extremely difficult to assess and plausible deniability remains the modus operandi."

Why it matters

These incidents highlight the vulnerability of mobile applications used as supplementary communication channels during conflicts. Experts warn that if the public begins to question whether emergency warnings are genuine, critical time could be lost when real threats emerge.


Sources

This article was drafted with AI assistance and checked against the sources above. Company claims are reported as claims. Cover image is AI-generated.

Questions readers ask

When did the cyberattacks on emergency alert systems occur in Ukraine and Russia?
The attacks happened overnight starting on the evening of November 1. Ukraine's Air Alert app was hacked on that evening, and Russia's system showed signs of compromise hours later.
What false warnings were broadcast during the cyberattacks?
Users received fake warnings of possible nuclear strikes, chemical threats, public disturbances, and dangerously high radiation levels. In Russia, messages claimed nuclear warheads were launched and advised citizens to stock up with food for three weeks.
Did the attacks affect all public warning infrastructure in Russia?
No, Russian authorities stated that the primary public warning infrastructure remained unaffected. This included sirens, loudspeakers, SMS messages, television, and radio broadcasts.
Why do experts consider these attacks significant?
Experts warn that these incidents highlight the vulnerability of mobile applications used as supplementary communication channels during conflicts. They note that if the public questions whether warnings are genuine, critical time could be lost when real threats emerge.

The day's checked news, by email

One short email a day with the top stories. Free, and you can unsubscribe in one click.

Or follow for the latest news:

Advertisement

How do you feel about this story?

Comments 0

No comments yet. Start the discussion.