Official air alert applications in both Ukraine and Russia were targeted in cyberattacks on Sunday night, resulting in fake messages warning of nuclear attacks, radiation, and street fighting being sent to users.
App Compromised in Ukraine
Ukraine’s widely used air alert app triggered red-level warnings nationwide, with some residents in Kyiv and other areas receiving additional alerts regarding chemical attacks and radiation threats. The Ukrainian air force stated on Telegram that the app had likely experienced hostile interference, assuring the public that no radiation threat existed and advising them to consult official channels. The government temporarily disabled the application for maintenance after determining it had been compromised.
Some of the fraudulent notifications were drafted in Russian, which immediately raised suspicions among many citizens. Olena, a Kyiv resident, told BBC Radio 4’s Today programme that her initial reaction was panic before realizing the message was illegitimate. “The first thought was ‘oh my god, I’m not prepared for this’. I’m prepared for blackouts, for a cut in central heating and water supply, but not for nuclear attack,” Olena said, adding that her husband subsequently received alerts regarding street fighting in Kyiv written in Russian.
Oleksander Merezhko, chair of the foreign affairs committee in the Ukrainian parliament, told the BBC that the incident did not provoke widespread panic or extreme reactions among citizens. “This message was in Russian language which immediately aroused suspicions,” Merezhko said, noting that people in Ukraine understood such events were part of cyber warfare. Herbert Lin, a senior research scholar for cyber policy and security at Stanford University, told BBC World Service’s Newsday programme that it marked the first time such a breach had affected an official Ukrainian information app, though he suspected it would not be the last.
Similar Hack Hits Russian Alert System
Hours after the incident in Ukraine, Russian authorities reported that one of their air raid alert systems was also subjected to a massive cyberattack that transmitted fake information to the public. A purported screenshot of a fake alert, shared on Telegram by the Ukrainian partisan group Atesh operating in Russian-held territory, warned users that nuclear-armed attack drones had been launched against all Russian regions. The profanity-laden message instructed residents to urgently stockpile food for three weeks and seek shelter.
The messages did not generate widespread panic in Russia on Monday morning, and the event received limited attention from domestic media outlets. Kremlin spokesman Dmitry Peskov did not address the breach specifically when asked, but noted that Russian government internet resources faced constant cyberattacks around the clock, adding that the proliferation of artificial intelligence technology contributed to rising incidents. Russia’s emergencies ministry stated that the application’s full functionality would be restored by the end of the day and that the wider alert system remained unaffected.
Cyber experts told the BBC that while both nations frequently target one another in cyberspace, the informal language in Sunday’s hoax alerts pointed toward hacktivist groups aligned with either Kyiv or Moscow rather than directed state operations. Analysts suggested perpetrators may have waited to execute the Russian system hack until after Ukraine’s platform was compromised.
The Ukrainian app security breach occurred minutes before a localized ceasefire expired in the frontline Kherson region, an agreement brokered in part by US First Lady Melania Trump to facilitate civilian evacuations from Oleshky.
