The short version
- Unauthorized actors breached emergency alert applications in Ukraine and Russia, sending fabricated warnings about nuclear strikes and radiation leaks to citizens.
- The cyber incidents occurred as a localized humanitarian ceasefire in the Kherson region concluded, ending a significant pause in hostilities that facilitated evacuations.
- Officials in both countries asserted that core military command structures remained secure despite the compromise of civilian notification channels.
Authorities in Ukraine and Russia reported simultaneous cyberattacks targeting their respective emergency alert mobile applications late Sunday, causing widespread confusion among residents. Users in Ukraine received false notifications warning of imminent nuclear threats, high radiation levels, and chemical dangers, while Russian citizens were subjected to fake alerts across dozens of regions. The timing of these digital breaches coincided with the expiration of a limited humanitarian ceasefire, raising questions about potential coordination or opportunistic exploitation of heightened tensions.
In Ukraine, the state-run air raid alert service was temporarily suspended after unauthorized parties interfered with its operation. Messages sent to users contained spelling and grammatical errors and were written in a mix of English, Russian, and Ukrainian. One notification, composed in Russian, falsely claimed that an Oreshnik intermediate-range ballistic missile was incoming, urging recipients not to worry despite the alleged nuclear threat. Ukraine’s Center for Countering Disinformation advised citizens to ignore suspicious links and rely on physical sirens and social media channels for verified information while the breach was addressed.
Russian authorities confirmed that hackers had gained access to the mobile app operated by the Ministry of Emergency Situations, sending false alerts to approximately 33 of the country’s 89 regions. The ministry stated that the vulnerability had been identified and that necessary measures were being implemented to prevent recurrence. Officials reassured the public that the broader alert system, which includes SMS messages, media broadcasts, and municipal sirens, remained fully functional. Kremlin spokesperson Dmitry Peskov noted that all state agencies face constant cyber threats, including those leveraging artificial intelligence, and emphasized the need for improved cybersecurity protocols.
It remains unclear whether the attacks on Ukrainian and Russian systems were related or carried out by the same actors. A Telegram channel attributed the breach of the Ukrainian system to a hacking group known as Hitcore, but this claim could not be independently verified. No affiliations or specific motivations for the purported hackers have been established. The lack of clarity surrounding the perpetrators underscores the complex and often opaque nature of cyber warfare in the ongoing conflict.
Despite the disruption to civilian alert systems, Ukrainian military officials maintained that the cyberattack did not compromise national security or defense operations. Yurii Ihnat, a spokesman for Ukraine’s air force command, explained that the mobile application is separate from military command structures, ensuring that strategic communications remained intact. This distinction highlights the layered approach both nations take to protecting critical infrastructure, even as civilian-facing digital services remain vulnerable to intrusion.
The cyber incidents emerged hours after a localized ceasefire in the Kherson region expired at midnight Monday. The truce, which began on October 27, was part of a humanitarian aid and evacuation mission in the Russian-occupied city of Oleshky. It marked the most significant pause in fighting between Kyiv and Moscow since Russia’s full-scale invasion began nearly five years ago. Ukrainian authorities reported multiple drone attacks in Kherson early Monday, resulting in blast injuries to two elderly residents who were hospitalized.
Dmytro Lubinets, Ukraine’s ombudsman and lead civilian negotiator for the mission, described the evacuation effort as exhausting and highly complicated. He noted that the oldest person evacuated was 94 years old, and that 104 pets, including four parrots, were also rescued. Lubinets expressed hope that this localized ceasefire could serve as a pilot model for future missions and contribute to momentum in three-way negotiations involving Ukrainian, Russian, and U.S. officials expected later this month.
Lubinets credited the involvement of U.S. First Lady Melania Trump as critical to brokering the limited truce, stating that American representation was essential for coordinating military and intelligence bodies. He indicated that Ukraine aims to establish mechanisms for delivering aid to residents who chose to remain in Oleshky, though details are still being finalized. As both nations work to restore their digital alert systems, the incident serves as a stark reminder of the vulnerabilities inherent in modern conflict zones.
Sources behind this briefing
Go to the original reporting
- PBS NewsHour↗Ukraine and Russia both report fake emergency alerts after cyberattacks target apps as limited ceasefire ends
