Russian and Ukrainian Emergency Apps Hacked, Spreading Fake Nuclear and Chemical Attack Warnings

Emergency warning applications in both Russia and Ukraine were compromised overnight Sunday into Monday, with authorities in each nation confirming the cyber incidents. It remains unclear if the two hacks are connected. These apps are designed to alert the public to threats such as missiles, drones, and other dangers. However, instead of causing widespread panic, the fabricated messages appear to have had minimal impact on civilians already desensitized by the ongoing conflict, instead sparking a wave of creative memes.

Late Sunday, fake messages were posted on Ukraine's public air raid app, falsely claiming that the capital, Kyiv, and other regions were under nuclear and chemical alerts, as well as facing the threat of street combat. Another fabricated alert stated that Russia's hypersonic Oreshnik missile had been deployed. The Ukrainian air force acknowledged on Telegram that "the air alert app appears to have been subjected to enemy influence." They reassured the public, stating, "There is no radiation threat! Stay calm and follow our updates on our channel!" The app had recently been updated to provide real-time tracking of drone movements.

Stepan Tanasiychuk, who oversees Ukraine’s Air Raid Alert project, reported on Monday that the app was being gradually restored, with new yellow and red alert levels now visible on the map. "The team is taking additional measures to secure the app in order to prevent similar situations in the future," Tanasiychuk stated on Instagram. "We realise how much unnecessary worry and inconvenience this has caused."

In a separate incident, the mobile application of Russia's emergencies ministry, Emercom, was subjected to a "massive cyberattack" early Monday, leading to the "spread of false information to the public," according to Russia's state news agency TASS, citing the ministry. The ministry reported that a false alert was disseminated to 33 Russian regions, falsely claiming that "NUCLEAR WARHEADS ON P1-SUN DELIVERY SYSTEMS have been launched across ALL regions of Russia," accompanied by an expletive-laden warning. The ministry later announced on Monday that "The app is currently operational, and its full functionality will be restored by the end of the day." They added, "EMERCOM specialists have analyzed the incident and identified the vulnerability exploited by the attacker." The ministry downplayed the incident's significance, noting that official alerts are also distributed through traditional channels like sirens, loudspeakers, SMS messages, and media broadcasts.

Kremlin spokesman Dmitry Peskov commented on Monday that "All electronic resources belonging to our government agencies are under constant threat of cyberattacks." He further noted that "As technologies, including AI, continue to evolve, the threat of cyberattacks is growing."

Few individuals appear to have believed the false warnings. Some users expressed that the incident had eroded their trust in official alerts. One Russian user shared their decision to delete the Emercom app, stating, "I won’t be installing anything like that again. How can they leave apps like this vulnerable? It’s complete nonsense, of course, but what if it weren’t?" Comments on Instagram from Russian users indicated skepticism, with one noting the fake alert was "written in such a way that it's impossible to believe it's real." Another user questioned, "It was hard to believe such nonsense. … How did (the Emergencies ministry) even let this happen.. let themselves get hacked."

Other social media reactions included humor and disbelief. One user posted, "You wake up, open Threads and see tons of posts like this, BUT THANKFULLY IT’S FAKE!" Some joked about not receiving the warning, with one comment reading: "This information was reserved for the chosen ones, don’t worry, you’re not important enough to be hacked." A resident of Kyiv responded to the street fighting alert by posting, "Good thing our mayor is a boxer." Another social media post humorously listed additional fabricated threats, such as a "Cat invasion," a "Pancake emergency," a "Clown attack," and an "Alien invasion."