Hackers Hijack Emergency Alert Apps in Ukraine and Russia With Fake Nuclear Attack Warnings

Emergency alert applications in both Ukraine and Russia were breached overnight, with hackers pushing fabricated warnings of nuclear attacks, radiation leaks and chemical strikes that briefly sowed panic among users in both countries.

Ukraine's air raid alert channel confirmed that unauthorized parties had gained access to the app and that the service was temporarily suspended. According to officials, the platform — which Ukrainians rely on daily for notifications about incoming missile and drone strikes — was later restored after displaying false claims about high radiation levels and chemical attacks in Kyiv. The Ukrainian air force subsequently stated that the application appeared to have been subjected to hostile influence and urged the public to remain calm, stressing that no radiation threat existed. Officials issued all-clear messages and said all public warning systems, including air raid sirens, were operating normally.

The bogus messages, written in Russian and riddled with spelling errors, referenced a hacking group called Hitcore. A Russian Telegram channel with ties to the country's security services said it had spoken with representatives of the group, who claimed responsibility for the intrusion. One of the fake alerts claimed that Russia had launched a hypersonic Oreshnik missile — a weapon capable of carrying a nuclear warhead — and that a nationwide nuclear alert had been declared across Ukraine.

Several hours later, Russia's Ministry of Emergency Situations reported that its own mobile application had also been hit by a large-scale cyberattack that generated false alerts about nuclear weapons. Users in Russia were told that nuclear warheads had been launched against the entire country and were advised to stock up on three weeks of food and take shelter in cellars. The ministry downplayed the impact, noting that the application is a supplementary information source rather than one of its primary public warning channels.

A sample of the fake message reviewed by Reuters made little effort to appear like an official announcement, instead using colloquial language and expletives while disparaging Russia. The incident highlights the vulnerability of digital public-alert infrastructure during wartime and the potential for cyber operations to spread disinformation and provoke public alarm.

Authorities in both countries moved quickly to reassure citizens and restore normal service, but the episode underscores how emergency notification systems have become a target in the broader information conflict surrounding the war. Neither side has publicly attributed the attack to a state actor, and investigations into the breaches are ongoing.