Nuclear threats and street brawls: Russia, Ukraine report attacks on their emergency alert apps

Fake nuclear threat alerts are now being sent to millions of phones, which could have real-world consequences beyond a fleeting panic.

Both Russia and Ukraine reported cyberattacks on their respective emergency alert applications on Sunday evening, causing the dissemination of false notifications regarding missile and nuclear threats. Ukraine's "Air Alert" app was compromised first, with the Air Force quickly issuing a statement on Telegram to dispel nuclear fears and confirm a likely compromise. Shortly after, Russia's Ministry of Emergency Situations confirmed its own mobile app had also been subjected to a "massive cyberattack," allowing for the distribution of fake information. Russia's ministry stated that work was underway to patch the vulnerability and restore normal operations, later confirming the app was functioning normally. Both governments used Telegram to communicate the attacks and to remind citizens of alternative, official channels for receiving emergency warnings, such as sirens, SMS messages, and television and radio broadcasts.

The synchronized nature and messaging of these attacks suggest a coordinated effort, potentially as an escalation of the ongoing cyber warfare between the two nations. This incident highlights the vulnerability of critical public communication channels and the potential for these tools to be weaponized for psychological impact, even if official channels remain secure. It also underscores the challenge of maintaining public trust when even emergency alert systems can be compromised.

As cyberattacks increasingly target civilian infrastructure and communication, the reliance on mobile apps for emergency notifications presents a significant risk. This event prompts a re-evaluation of the security architecture for these systems, emphasizing the need for robust defenses beyond just the core national alert mechanisms. Future preparedness will likely involve not only technical safeguards but also public education campaigns to critically assess information during high-stress events.