Cyberattack: Fake nuclear alerts reach phones in Ukraine and Russia

Hackers disrupted emergency alert mobile applications in both Ukraine and Russia late Sunday. The attackers sent false warnings to users in Ukraine claiming an imminent nuclear threat. Russian authorities confirmed their systems were also compromised. The attacks occurred during a period of heightened tension in the ongoing conflict.

Ukrainian users received messages in English, Russian, and Ukrainian containing spelling errors. One note written in Russian stated, “Hi! There will be a nuclear threat across Ukraine. Do not worry, the Oreshnik is incoming.” The reference to the Oreshnik missile is a Russian intermediate-range ballistic weapon. The Ukrainian air raid alert channel said unauthorized parties interfered with the app. It warned residents not to click links in suspicious notifications.

Russia’s Emergency Situations Ministry reported that hackers accessed its app to send a false alert across 33 of its 89 regions. The false alert went out at approximately 2:45 a.m. Moscow time. The ministry stated that the digital vulnerability had been identified. It added that necessary measures were being taken to prevent a similar breach. The wider public alert system, including SMS messages and sirens, remained functional.

A Telegram channel reported that a hacking group called Hitcore claimed responsibility for the breach of the Ukrainian system. The group’s identity and motivations were not independently verified. Yurii Ihnat, a spokesman for Ukraine’s air force command, told 1+1 television that the app is separate from military command systems. He said the cyberattack had no impact on security or defense operations.

The attacks occurred hours after a humanitarian ceasefire expired in the Kherson region. The localized truce began on Oct. 27 and ended at midnight on Monday. It was the most significant pause in fighting since the full-scale invasion began nearly five years ago. Ukrainian authorities reported multiple Russian drone attacks early Monday after the deadline passed. A 62-year-old woman and a 73-year-old man were hospitalized with blast injuries in the city of Kherson.

Ukraine’s ombudsman, Dmytro Lubinets, noted that the oldest person evacuated to Ukrainian territory during the mission was 94 years old. He said 104 pets, including four parrots, were also rescued. Lubinets described the mission as exhausting and very complicated. He said the team had to remain alert at all times while crossing into Russian territory. An estimated 2,000 civilians were in Oleshky when the truce took effect.

Ukraine’s general staff said Russia’s military had bolstered drone defenses and replenished ammunition supplies during the ceasefire. Elsewhere, drone strikes injured 12 people in the eastern Kharkiv region. Five people were injured in the Black Sea port city of Odesa. Russia’s Ministry of Defense said it shot down 212 Ukrainian drones overnight. Kremlin spokesperson Dmitry Peskov said all state agencies face constant cyber threats, including those using artificial intelligence.