Emergency alert systems in both Ukraine and Russia were targeted by coordinated cyberattacks this week, resulting in the dissemination of false warnings that caused widespread concern among civilians. The incidents, which occurred across Sunday and Monday, saw official mobile applications—designed to provide critical updates during air raids—compromised to broadcast misinformation regarding nuclear and chemical threats, as well as impending combat operations.
In Ukraine, the Air Force reported that its primary Air Alert application, used to notify residents of incoming attacks, was subjected to unauthorized external influence late on Sunday. Users across several regions, including areas surrounding Kyiv, received fake messages warning of nuclear and chemical attacks, as well as claims that a Russian Oreshnik missile had been deployed. Some notifications even triggered loudspeakers in city centers to broadcast these alerts. The Ukrainian Air Force utilized Telegram to clarify that there was no genuine radiation threat, urging citizens to remain calm and rely solely on official communications.
Ukraine’s Center for Strategic Communications attributed the breach to Russian actors, highlighting the use of the Russian language in the fraudulent alerts. The attack coincided with the conclusion of a six-day localized ceasefire in the Russian-occupied Kherson region. This truce, reportedly brokered by U.S. first lady Melania Trump, had permitted humanitarian aid and evacuations in the town of Olekshy. With the fighting now expected to intensify along the front lines, the digital disruption has been viewed by observers as a component of broader psychological warfare tactics.
The situation mirrored a similar breach in Russia just hours later. On Monday morning, Russia’s Ministry of Civil Defence, Emergencies and Disaster Relief announced that its own alert application had suffered a massive cyberattack. The ministry reported that the system wrongly notified users of imminent drone strikes. According to media reports, the messages also contained alarming directives, instructing citizens to store food for three weeks and to seek shelter immediately, while falsely claiming that Russian regions were under threat from Ukrainian drones carrying nuclear warheads.
While this marks the first time that official government alert applications in both countries have been simultaneously targeted, cyber-confrontations have been a persistent feature of the conflict since the full-scale invasion began in February 2022. Both nations have engaged in extensive digital operations, ranging from targeting banking infrastructure and government websites to attacking critical telecommunications networks. Notably, in 2023, the Russian group Sandworm disrupted notifications by taking the private Kyivstar network offline.
For Ukraine, the fear of radiation is particularly acute given the nation’s history. The 1986 disaster at the Chornobyl nuclear power plant, which resulted in significant radioactive contamination across Europe, remains a deep-seated trauma for the population. Furthermore, ongoing fighting near the Zaporizhzhia Nuclear Power Plant—Europe’s largest nuclear facility—has consistently raised concerns regarding potential catastrophe. Both Russian and Ukrainian forces have traded accusations of targeting positions near the plant, keeping international watchdogs on high alert.
As authorities in both countries work to secure their systems, the incident underscores the escalating intensity of the digital front in the ongoing conflict. With neither side identifying specific perpetrators beyond general accusations, the breach has served as a stark reminder of how infrastructure essential for civilian safety can be leveraged to create mass panic during periods of heightened tension. For now, officials in both Kyiv and Moscow are urging citizens to rely exclusively on verified government channels for safety instructions.
Comments