Panic erupts as fake nuclear alerts hit both Ukraine and Russia

Hackers compromised emergency alert applications in both Ukraine and Russia on Monday, sending false warnings of nuclear attacks that caused widespread confusion. The simultaneous breaches targeted mobile services used by civilians to track missile and drone threats. Unauthorized actors inserted messages claiming high radiation levels and chemical attacks in Kyiv. In Russia, users received alerts stating nuclear warheads had been launched against the country.

Ukraine’s air raid alert channel confirmed the intrusion in a social media post, identifying the actors as unauthorized parties. The service was temporarily suspended after the posts, which contained spelling errors and were written in Russian, went live. Officials noted the messages mentioned the hacking group Hitcore. A Telegram channel with ties to Russian security services reported speaking to representatives who claimed responsibility for the operation. One fabricated alarm asserted that Russia had launched a hypersonic Oreshnik missile capable of carrying a nuclear warhead.

The Ukrainian air force issued a statement clarifying that the application appeared subjected to enemy influence. The branch assured the public that no radiation threat existed and urged citizens to remain calm while following official updates. Authorities subsequently issued all-clear messages, confirming that all public alert systems, including air raid sirens, were functioning properly. The disruption was resolved once officials verified the integrity of the remaining communication channels.

Several hours after the Ukrainian breach, Russia’s Ministry of Emergency Situations reported a similar cyberattack on its mobile app. False alerts instructed Russian citizens to stockpile three weeks of food and take shelter in cellars. The ministry characterized the incident as a massive cyberattack but largely minimized its impact. Officials stated the mobile application served as a supplementary source of information rather than a primary public warning channel. This distinction was intended to explain why the breach did not trigger a nationwide physical response.

A bogus message reviewed by Reuters displayed a casual tone that diverged from standard official announcements. The text included colloquialisms and expletives while describing Russia as a swamp. The lack of formal structure suggested the attackers aimed to create disarray rather than maintain a veneer of governmental authority. Both nations are now reviewing their digital defense protocols to prevent similar intrusions into critical alert infrastructure.

The incident highlights the vulnerability of mobile-based emergency systems in active conflict zones. Both countries rely on these apps to coordinate civilian safety during strikes. The breach forced millions to question the reliability of their primary warning sources. Authorities in Kyiv and Moscow are working to fully restore trust in the platforms. No further disruptions have been reported since the all-clears were issued.