Early on Monday, Russia's Emergencies Ministry said its own public warning app had been hit by a "massive cyberattack" that sent a fake nuclear-launch alert to users in 33 Russian regions — hours after hackers hijacked Ukraine's "Air Alert" app on Sunday night and pushed false nuclear, radiation and chemical attack warnings across that country, the attack reported in the story below. Both governments say their emergency warning apps were hacked within hours of each other; neither has proved who did it, and it is not established that the two attacks are linked.
The fake Russian alert appeared at about 2:45 in the morning, Moscow time, in the ministry's app and on its Telegram channels. It claimed that "NUCLEAR WARHEADS ON P1-SUN DELIVERY SYSTEMS have been launched across ALL regions of Russia," in a message laced with profanities and mockery that told people to stock up on three weeks of food and hide. The ministry said it spotted the intrusion as the first messages went out, disconnected and isolated the affected services, and identified the vulnerability the attackers used, with the app's full functionality to be restored by the end of Monday.
The ministry played the incident down: the app, it said, is only a supplementary service, and Russia's main warning channels — sirens and loudspeakers, SMS messages, and television and radio broadcasts — were never affected. Kremlin spokesman Dmitry Peskov said Monday that "all electronic resources belonging to our government agencies are under constant threat of cyberattacks."
On who carried out the two hacks, the claims point in both directions and none is verified. After the Russian alert appeared, Atesh, a pro-Ukrainian partisan group, posted a screenshot of it on Telegram announcing that the Emergencies Ministry app had been hacked, while a Russian Telegram channel tied to the security services reported that a hacker group called Hitcore claimed responsibility for the Russian breach — a claim that could not be independently verified — and Moscow has named no culprit. For the Ukraine hack in the story below, Ukraine's Centre for Strategic Communications, SPRAVDI, blamed Russia outright; the fake Ukrainian alert itself pointed readers to a Telegram channel called Hitcorecorp, and the pro-Kremlin channel Mash reported that the same Hitcore group claimed that attack too, saying it got in by sending an administrator a malicious file — also unverified. Cyber experts cited by the BBC say the informal, profanity-laced wording of the messages points to activist hackers sympathising with one side or the other, not to proof that either government directed the attacks.
The two hacks landed hours after the localised truce in Ukraine's Kherson region — which ran from October 27 to November 1 and was the longest ceasefire of the war — came to an end, with Kyiv saying Moscow had refused an offer to extend it.
For ordinary people on both sides of the border, these apps are not a curiosity: they are the signal that tells a family when to get out of bed and run for shelter. A fake alert screaming that nuclear warheads have been launched terrorises people in the night — and every fake also does quieter damage, teaching the public to hesitate at the next alert, which may be the real one.
— Previously posted on Monday, November 2, 2026 —
Late on Sunday night, phones across Ukraine lit up with the most frightening warnings of the war — a radiation hazard in Kyiv, a chemical attack, street fighting in the capital, and one message in Russian announcing that a nuclear alert was about to sound across the whole country because Russia's Oreshnik missile was on its way. None of it was real. Ukraine's Air Force says the country's official Air Alert app, the application millions of people rely on to know when to run for shelter, was hacked.
The fake warnings came in a burst — four messages between 10:47 and 10:49 on Sunday night. The first, in Ukrainian, declared a radiation threat in Kyiv. A minute later came the message in Russian: "Hi! A nuclear alert is about to go off all across Ukraine! Don't worry, the Oreshnik is on its way." Then a chemical attack alert for Kyiv, and a warning of street fighting telling people not to go outside. At least one message carried a link to a Telegram channel — and officials in the regions were quick to warn people not to tap it, because a link riding on a fake emergency alert is exactly how phishing traps are set.
The Air Force answered about ten minutes later on its Telegram channel, saying the app had likely been subjected to hostile interference. Its message was blunt: "There is no radiation threat! Stay calm and follow our updates on our channel!" Air Force spokesman Yuriy Ihnat later confirmed to AFP that the app had been hacked. Ukraine's Center for Countering Disinformation said the threat information showing in the app did not correspond to reality — and in the Lviv region, the fake radiation signal had even been played out over street loudspeakers before officials shut that down too.
The app's own developers then confirmed that third parties had carried out unauthorised interference, disabled push notifications and suspended the app while they worked on it, noting that it stores no personal data. Just before midnight, about an hour after the fakes appeared, all-clear messages went out clearing each false threat one by one, and by midnight the State Emergency Service said the nationwide warning system was operating normally. That wider system — the one feeding regional administrations and street sirens — had never stopped working, and Kyiv residents were pointed to the separate Kyiv Digital app, which was unaffected.
On who did it, the claims and the proof are two different things. SPRAVDI, Ukraine's Centre for Strategic Communications, said flatly on X that Russians hacked the app, pointing to the Russian-language Oreshnik message. The Air Force itself said only that the interference was hostile and from the enemy. No technical evidence identifying the attackers has been made public, no group has claimed responsibility, and how the attackers got inside the app is still unknown.
Why this matters goes beyond one frightening hour. A warning app has only one asset: when it sounds, people believe it instantly and move. Fake nuclear warnings are a weapon aimed at that belief — every false alarm teaches a frightened public to hesitate, and hesitation is measured in lives when the next alert is real. For families living under nightly missile and drone attacks, a warning system that cannot be faked is not a tech story; it is the difference between a signal they can trust with their children's lives and one they have to stop and question first.
📰 ProfiloPolitics Member News — choose your news, share it, earn credit: https://white-curlew-963569.hostingersite.com
Join ProfiloPolitics on Telegram
Get the news as it breaks — follow our Telegram channel for every story, first.
Follow @profilopoliticsnews