Air Raid Alert App Hacked in Ukraine, Russia’s App Hit Next

Ukraine’s official Air Alert app, the air raid alert app millions of people rely on for missile and drone warnings, was hacked late on November 1 and pushed false alerts about nuclear, chemical and street-fighting threats across the country. Hours later, in the early hours of November 2, Russia said the mobile app of its emergencies ministry had been hit by a “massive cyberattack” that sent fake warnings of nuclear strikes to Russian users.

What Happened to Ukraine’s Air Raid Alert App

The Air Alert app is backed by Ukraine’s Ministry of Digital Transformation and built with security company Ajax Systems. According to The Kyiv Independent, users received a stream of fake notifications written in Russian, including one that read, “Hi! A nuclear alert is about to go off all across Ukraine! Don’t worry, the Oreshnik is on its way.” Oreshnik is a Russian intermediate-range ballistic missile.

Ukraine’s air force responded on Telegram, saying, “There is no radiation threat! Stay calm and follow our updates on our channel!” The app’s developers said “unauthorized persons have interfered with the application,” then disabled push notifications and temporarily suspended the service. Regional governors told residents there was no real threat, and the Vinnytsia governor warned people not to tap links inside the messages, pointing to a possible phishing element.

By midnight, Ukraine’s State Emergency Service said the national alert system was working normally. Around 2 a.m., the app team said service was gradually returning with target display still switched off, and stressed that the app “does not store or use personal data, so there is no threat to users.” Ukraine’s Center for Strategic Communications blamed Russia for the attack.

Russia’s Emergency App Was Hit Next

Russia’s Ministry of Emergency Situations said on Telegram that its app had been attacked, “allowing attackers to send fake information to the public,” and that work was underway “to patch the vulnerability.” Messages sent to Russian users claimed nuclear warheads had been launched at every region and told people to stock up on food for three weeks and hide in basements. The ministry did not name an attacker, but the BBC reported that a Ukrainian group was said to be behind the fake warnings, which would make it a tit-for-tat response.

Why It Matters

In Ukraine, people often have only minutes to reach shelter during a ballistic missile attack, so a trusted alert channel is critical infrastructure. Fake warnings can cause panic, and repeated false alarms can teach people to ignore real ones. The incident is another example of state-linked hacking aimed at civilians rather than companies, following campaigns such as the mercenary spyware attacks on German lawmakers and North Korea’s role in the record Binance hack.

Neither side has published technical details on how attackers got access, including whether a third-party push notification service or stolen credentials were involved. Leaked keys have driven other recent incidents, like the Northflank breach, so investigators will likely start there.

For now, Ukrainian officials advise residents to rely on air raid sirens, official Telegram channels and city apps such as Kyiv Digital, and to avoid tapping links in unexpected alert messages.