Fake Nuclear Attack Alerts Sent to Apps in Ukraine and Russia after Cyberattacks

A notification that should have warned people of danger instead became the source of a frightening false alarm. Emergency alert apps in Ukraine and Russia were reportedly hacked, sending messages that warned of nuclear attacks, radiation risks and chemical threats.

In Ukraine, one message claimed that a Russian “Oreshnik” missile was incoming. In Russia, a fake warning reportedly told residents that nuclear warheads had been launched. Authorities in both countries said the alerts were false, but the incident exposed how cyberattacks can exploit the public’s trust in emergency systems.

What Happened to the Emergency Alert Apps?

The incidents unfolded late on Sunday in Ukraine and early Monday in Russia. Ukraine’s public air-raid alert app, which residents use to receive warnings about missile and drone attacks began displaying false alerts for Kyiv and other areas.

The messages referred to possible nuclear and chemical attacks, high radiation levels and street fighting. One notification, written in Russian, claimed that a nuclear threat was imminent and that the Oreshnik missile was incoming.

Hours later, Russia’s Emergency Situations Ministry said its own mobile app had also been hit by a cyberattack. A false message was reportedly sent across 33 of Russia’s 89 regions, warning of nuclear danger.

The Oreshnik Warning: A False Nuclear Threat

The mention of the Oreshnik missile made the Ukrainian alert especially alarming. The Russian ballistic missile is capable of carrying a nuclear warhead, but officials said the notification did not reflect a real attack.

Ukraine’s air force said the alert system appeared to have been subjected to hostile interference and stressed that there was no radiation threat. The message was part of the app breach—not confirmation that a missile had been launched.

The false notifications appeared in Ukrainian, Russian and English. Some English-language messages reportedly contained spelling and grammatical errors, another indication that the alerts were not genuine official warnings.

Ukraine Temporarily Suspends Its App

Ukraine’s authorities temporarily suspended the compromised app while addressing the breach. The service was later restored, and officials urged users not to click links in suspicious notifications.

The country’s air-raid sirens and other public warning channels continued to operate. Ukraine’s Center for Countering Disinformation also advised residents to follow verified emergency sources while the app issue was being resolved.

The warning was important: even when a digital alert system is compromised, people still need reliable ways to receive information about genuine threats.

Russia Says Its Wider Warning System Remained Operational

Russia’s Emergency Situations Ministry said it was working to restore its app and had identified the digital vulnerability exploited by the hackers. It also emphasized that the app was a supplementary information channel, rather than the country’s primary public warning system.

According to the ministry, other alert methods—including text messages, media broadcasts, municipal sirens and loudspeakers—remained operational.

Kremlin spokesman Dmitry Peskov said government agencies faced a continuing cyberattack threat and called for stronger protection of digital resources.

Who Was Behind the Cyberattacks?

Responsibility for the incidents had not been independently established. A Russian Telegram channel linked to security services reported that the hacking group Hitcore had claimed responsibility for the breach of Ukraine’s system, but that claim could not be verified.

In Russia, a pro-Ukrainian hacking group called Atesh posted a screenshot of the false alert sent through the emergency app. However, public claims and screenshots do not, on their own, confirm who carried out either attack or whether the two incidents were coordinated. Officials and news agencies said it remained unclear whether the breaches were connected.

A Cyberattack That Exploited Public Fear

The fake nuclear warnings appeared amid the ongoing Russia-Ukraine war, when emergency notifications are part of daily life for many residents. That context made the breach particularly sensitive: people rely on alerts to decide when to seek shelter, avoid danger or check on loved ones.

Some residents in Kyiv reportedly treated the messages with skepticism, while others were briefly frightened. The incident also prompted a wave of online reactions, including humour and memes but the underlying security concern remained serious.

A compromised alert app can do more than spread misinformation. It can undermine trust in legitimate warnings, distract people during a real emergency and create confusion at a moment when clear instructions matter most.

What Residents Should Do When an Alert Looks Suspicious

Authorities urged people to remain calm and use official channels to verify emergency information. In situations involving conflicting alerts, residents should:

• Check official government, emergency-service or military communication channels.
• Avoid clicking links in unexpected or suspicious notifications.
• Follow local sirens and other established warning systems.
• Wait for verified updates before sharing alarming messages.

The incident is a reminder that emergency apps are digital infrastructure and, like other connected systems, they can be targeted. The alerts were fake, but the breach was real. For people living through conflict, protecting the systems meant to keep them safe is an increasingly urgent part of public security.