Fake nuclear and air-raid alerts pushed via compromised Ukrainian Air Alarm and Russian emergency apps
On Sunday night, both Ukraine and Russia said hackers had compromised their official emergency alert apps and used them to push fake warnings, including nuclear, radiation, chemical and street-fighting alerts. Ukraine's Air Alarm app, supported by the Ministry of Digital Transformation, sent red-level air raid warnings nationwide from about 22:47, and the ministry temporarily disabled it. Hours later, Russia's Ministry of Emergency Situations reported a "massive cyberattack" on its own app. The Ukrainian partisan group Atesh claimed involvement according to UNN reporting. None of the claims have been independently confirmed, and no attribution has been established.
Detalhes técnicos
- Fake alerts began at about 22:47 with a radiation threat for Kyiv, followed by a Russian-language nuclear alert referencing "Oreshnik flying", then chemical attack and street-fighting alerts at 22:49. All-clear messages followed around 23:53.
- Alerts triggered a radiation hazard signal on loudspeakers in the Lviv region.
- A Vinnytsia official warned that a link in the message could be phishing.
- Ukrainian officials suspected "hostile interference"; experts suggested it was a new line in apparent Russian cyberattacks (per BBC). Atesh shared a purported screenshot of a fake nuclear alert in Russia.
- The exact intrusion vector is not stated.
Remediação
- Ukraine's Centre for Countering Disinformation advised enabling smartphone notifications, heeding sirens and relying only on official sources.
- Russia said its wider alert system (sirens, loudspeakers, SMS, TV, radio) was unaffected.
- Backup alert channels are essential when a compromised alert app must be disabled.
Linha do tempo
-
Fake nuclear and air-raid alerts pushed via compromised Ukrainian Air Alarm and Russian emergency apps
ler a análise desta fonte ocultar
On Sunday night, both Ukraine and Russia said hackers had compromised their official emergency alert apps and used them to push fake warnings, including nuclear, radiation, chemical and street-fighting alerts. Ukraine's Air Alarm app, supported by the Ministry of Digital Transformation, sent red-level air raid warnings nationwide from about 22:47, and the ministry temporarily disabled it. Hours later, Russia's Ministry of Emergency Situations reported a "massive cyberattack" on its own app. The Ukrainian partisan group Atesh claimed involvement according to UNN reporting. None of the claims have been independently confirmed, and no attribution has been established.
Technical Details
- Fake alerts began at about 22:47 with a radiation threat for Kyiv, followed by a Russian-language nuclear alert referencing "Oreshnik flying", then chemical attack and street-fighting alerts at 22:49. All-clear messages followed around 23:53.
- Alerts triggered a radiation hazard signal on loudspeakers in the Lviv region.
- A Vinnytsia official warned that a link in the message could be phishing.
- Ukrainian officials suspected "hostile interference"; experts suggested it was a new line in apparent Russian cyberattacks (per BBC). Atesh shared a purported screenshot of a fake nuclear alert in Russia.
- The exact intrusion vector is not stated.
Remediation
- Ukraine's Centre for Countering Disinformation advised enabling smartphone notifications, heeding sirens and relying only on official sources.
- Russia said its wider alert system (sirens, loudspeakers, SMS, TV, radio) was unaffected.
- Backup alert channels are essential when a compromised alert app must be disabled.