Hackers send fake nuclear attack warnings through Ukraine and Russia emergency alert apps
- Severity
- High
- Sources
- 3
What happened
Ukraine's Air Alert app (the "Alarm!" app was also referenced as being down) and Russia's Ministry of Emergency Situations mobile app were abused to push fake missile, nuclear, chemical and radiation alerts, with Ukraine's report at around 2100 UTC and Russia's confirmation at around 0030 UTC on Monday. No CVE, vulnerability details or attack vector were disclosed. Russia's ministry said the app was restored about 90 minutes later and that the attack did not compromise the national alert system. Defenders should treat mobile alert apps as an attack surface and verify emergency messages against independent channels.
For security analysts · Written by AI from 3 sources · Wrong?
What to do
- Rely on official sirens, SMS, state broadcasts and verified government social media accounts for emergency warnings.
- Enable the iOS or Android emergency alerts on your phone, as recommended by Ukraine's Ministry of Digital Affairs.
- Treat alarming nuclear or radiation messages from apps as unverified until confirmed by official sources.
Written by AI from the sources, checked against them
Full story timeline · 3 updates
- Mon 2 NovemberHackers Target Emergency Alert Apps in Ukraine and Russia, Sending Fake Nuclear Attack WarningsGBHackers
- Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert appsThe Register (all)
- Tue 3 NovemberHackers Hijack Emergency Alert Apps in Ukraine and Russia to Send Fake Nuclear Attack WarningsCyber Security News
Who reported · 3 outlets
Who and what is in it
Products
Government agencies