Fake Nuclear and Missile Alerts Hit Emergency Apps in Russia and Ukraine

Emergency alert apps in both Russia and Ukraine were attacked on the same Sunday evening, resulting in fake messages about missile and nuclear strikes being sent to the public. Officials from both countries confirmed the incidents. Ukraine's app was hit first. Its Air Force said on Telegram at around 2100 UTC that the Air Alert app had likely been compromised, and stressed there was no radiation threat. Fake warnings sent through the app referred to street fights in Kyiv, chemical attacks and radiation hazards.

At around 0030 UTC on Monday, Russia's Ministry of Emergency Situations said its own mobile app had suffered a massive cyberattack that let attackers send fake information to the public. It said work was underway to patch the vulnerability. About 90 minutes later it reported the app was working normally again. The ministry also noted that an attack on the app is not the same as a compromise of the national alert system, which relies on sirens, loudspeakers, SMS, television and radio. It described the app as only an additional, supporting service.

Ukraine's Ministry of Digital Affairs reminded citizens how to receive warnings while its "Alarm!" app was down. It pointed to built-in iOS and Android emergency alerts, state-controlled sirens, and official government social media accounts. This is a summary of the opening of the original report, so further details may be available in the full article.