Cyberattacks trigger false nuclear attack alerts in Ukraine and Russia

In Ukraine, the air raid alert app, utilized by 6.7 million people according to the digital transformation ministry and Ajax Systems, initially sent messages in Ukrainian indicating a “radiation threat in Kyiv.” A subsequent message, in Russian, claimed a nuclear alert would affect the entire country and attributed the threat to Russia’s Oreshnik missile, a powerful ballistic missile capable of carrying nuclear warheads.

Further false messages warned of chemical threats and potential “street fights” in Kyiv. Ukraine’s air force later confirmed via its Telegram channel that there was no radiation threat and that the app had likely been compromised. SPRAVDI, Ukraine’s center for strategic communications, attributed the incident to Russia, advising users to disregard any unusual messages.

Shortly after, Russia’s emergency ministry reported a “massive cyberattack” on its own mobile alert app, resulting in the dissemination of inaccurate information. Regional air raid alert Telegram channels operated by the ministry displayed bizarre and vulgar warnings in Russian, including claims of Ukrainian drones carrying nuclear warheads and instructions for citizens to stockpile food.

Russia has not yet publicly identified the perpetrator of the cyberattack. This incident follows a pattern of cyber warfare between the two nations, with both sides targeting public alert systems and critical infrastructure. A similar incident occurred in Russia in February 2023, when radio stations broadcasted false air raid alerts, and later, hackers breached TV and radio stations to display false attack warnings.