On November 1, the “Air Alert” mobile application—a lifeline for millions in Ukraine—suddenly broadcasted a series of terrifying, fabricated warnings.
Users received notifications alleging a radiation catastrophe, an imminent threat to the “Oreshnik” complex, and reports of street fighting in the capital. The Ukrainian Air Force moved quickly to counter the misinformation, confirming that no chemical or nuclear threats existed, according to reports from nra.lv.
Ukrainian officials identified the platform as the target of a coordinated hostile attack. To contain the breach, the project team deactivated notifications and temporarily disconnected the system. The team noted that no confidential user information is stored in their databases. Meanwhile, the Ministry of Digital Transformation urged citizens to rely on alternative channels, such as built-in iOS and Android alerts, which function even when devices are set to silent mode.
Within hours of the Ukrainian breach, digital emergency systems across the border faced parallel disruptions. On November 2, Russia’s Ministry of Emergency Situations (MChS) acknowledged that its own mobile application, used to warn citizens about drone strikes and other hazards, had suffered a massive cyberattack, BauskasDzive.lv reported.
The Russian ministry confirmed that “malicious actors managed to distribute false information to citizens,” though it later stated that the system was operating in normal mode and that the attack did not affect its core functionality, according to lat.bb.lv. The ministry declined to disclose the specific content of the false warnings distributed through its platform.
The State Emergency Service of Ukraine has issued a blunt directive: avoid clicking on suspicious hyperlinks embedded in fraudulent messages. Authorities emphasized that official information regarding real threats is disseminated through regional administrations and local alert systems, rather than via external links in mobile notifications.
Despite the rapid succession of these cyberattacks on public warning infrastructure, officials have not confirmed a connection between the two incidents. No group has claimed responsibility for the breaches.
Keep reading