Cyberattacks Hit Emergency Apps in Ukraine and Russia

Residents in Kyiv, Ukraine, and various regions of Russia received false emergency alerts on mobile phones late Sunday, November 1, and into Monday morning. The notifications warned of nuclear strikes, radiation exposure, and street combat, causing confusion for millions of people relying on these digital tools for safety during the ongoing war.

The first incident affected Ukraine’s Air Alert app, a primary service for tracking missiles and drones. Users in the capital and other areas saw messages claiming the city faced radiation risks and chemical attacks. One notification incorrectly stated that Russia had launched its Oreshnik ballistic missile, a weapon capable of carrying nuclear warheads. Ukraine’s Air Force confirmed the app was compromised and stated there was no reported radiation emergency.

Hours after the Ukrainian breach, a separate cyberattack targeted the emergency notification app operated by Russia’s Ministry of Emergency Situations. Russian residents received messages claiming nuclear warheads had been launched toward their territory. The alerts urged citizens to seek shelter and prepare emergency supplies. The Ministry acknowledged the cyberattack on Monday, confirming that unauthorized messages had been distributed to users.

Two hacking groups have claimed responsibility for the incidents. A group identifying as DC8044 said it accessed the Russian application’s notification system. Another group, calling itself Hitcore Corp, claimed the earlier breach of the Ukrainian app. One of the fraudulent Ukrainian notifications reportedly included a link to the group’s Telegram channel. Officials in both countries have not yet independently confirmed which group executed the attacks or if the two events were coordinated.

Both countries moved to stabilize their systems quickly. Developers of the Ukrainian Air Alert app suspended service and disabled notifications to investigate the unauthorized activity. By Monday morning, some functions had been restored, though security work continued. Russian officials emphasized that the country’s principal warning infrastructure, including sirens, television, radio, and text-message alerts, was not affected by the breach.

Ukrainian authorities urged residents to rely on verified military and government channels while the affected application was being fixed. Officials confirmed that Kyiv’s separate municipal emergency application remained unaffected. Both nations stressed that their broader public warning systems continued operating normally, ensuring that civilians could still receive verified alerts for real emergencies.

The incidents occurred as the war between Russia and Ukraine continues. While neither breach involved a confirmed nuclear attack, the unauthorized messages temporarily disrupted services designed to protect civilians. The events highlighted the vulnerability of digital emergency communication networks during active military conflict.