Government authorities in both Ukraine and Russia have reported that their respective emergency alert mobile applications were compromised by cyberattacks late Sunday. In Ukraine, the breach resulted in residents receiving false notifications claiming there was a high risk of nuclear radiation in the capital, Kyiv.
Ukraine’s air raid alert channel posted on Telegram late Sunday to confirm that unauthorized parties had interfered with the application's operations. The service was temporarily suspended, and officials urged users to ignore any links found in suspicious notifications. By Monday morning, Ukrainian authorities confirmed that the application, which is essential for citizens seeking safety during frequent Russian missile and drone strikes, had been restored.
The fraudulent alerts sent to Ukrainian users included false claims regarding chemical threats and public disturbances in Kyiv, alongside the radiation warning. These messages were notable for their spelling and grammatical errors, appearing in a mix of Russian, Ukrainian, and English. Some of the false posts referenced a hacking group identified as Hitcore. A Russian Telegram channel known as Mash, which maintains links to security services, claimed to have spoken with Hitcore representatives who took responsibility for the incident, though this claim remains unverified.
In response, Ukraine’s state-run Center for Countering Disinformation has advised users to stay updated through official social media channels and to rely on physical alert systems while the technical issues are resolved. Meanwhile, Russian officials also reported on Monday that hackers had gained access to their own Emergency Ministry mobile app to distribute fake alerts. While the Russian ministry did not disclose the identity of the attackers, they reassured the public that the broader emergency system remains functional, noting that the app serves only as a supplementary service to SMS alerts, media broadcasts, and municipal sirens.
