Hackers hit Ukraine and Russia's emergency apps, send fake nuclear alerts

On Sunday night, hackers launched a cyberattack on the emergency alert apps used by Ukraine and Russia, broadcasting false warnings to citizens about imminent air raids, chemical, and nuclear attacks. This occurred at the end of a six-day ceasefire brokered by US First Lady Melania Trump in the southern Ukraine region of Oleshky, the longest pause in hostilities since Russia's 2022 invasion.

In Kyiv, Ukraine's capital, the public air raid application began sending false alerts before 11 p.m. (2100 GMT), warning of radiation and chemical attacks, as well as the risk of street combat. Shortly after, Russia's state news agency, TASS, reported that its emergency ministry's mobile application had also been compromised and was transmitting fake public warnings.

Reuters could not determine the identity of the hackers responsible for the cyberattacks. Security experts have previously linked similar security incidents during the nearly five-year conflict to activist hackers and intelligence agencies from both nations. The Ukrainian Ministry of Digital Transformation confirmed that the air raid alert application was temporarily suspended, yet alternative alert methods continued to function, as did air raid sirens.

Residents in Kyiv responded to the false alerts with a mix of surprise and calmness. Many acknowledged that the alerts were likely a result of a hack, while others maintained their composure, emphasizing that they were not panicking. Russian authorities also acknowledged the breach, with the Emergencies Ministry stating that their app, although not a primary public warning system channel, was a supplementary source of information.