Hijacked alert apps send fake nuclear warnings in Ukraine and Russia

Ukraine and Russia both said that hackers had compromised their emergency alert apps on the night of Sunday 1 November 2026 and used them to send fake warnings, Security Affairs reported on 2 November, citing the BBC. Neither side's claims have been independently confirmed.

Shortly before 23:00 local time, Ukraine's widely used alert app sent the highest-level attack warnings across the country, and some users, including residents of Kyiv, were also warned of radiation, chemical attacks and street fighting. One message, in Russian, announced a nuclear alert for all of Ukraine. All-clear messages followed at 23:53, and Ukraine's Ministry of Digital Transformation temporarily disabled the app after it had apparently been compromised.

Hours later, Russia's ministry of emergency situations said its own app had suffered a massive cyberattack that sent false information to the public; a Ukrainian outlet attributed fake nuclear alerts inside Russia to the partisan group Atesh, citing a purported screenshot. Russia said warnings still reached people through sirens, loudspeakers, text messages, TV and radio.

Why it matters Public warning apps have become a target for psychological operations as well as disruption. A false alert spreads fear in minutes, and switching the app off removes a real warning channel, so alerting systems need backup channels and a tested way to issue corrections fast.