Rival Russian and Ukrainian hacking groups have claimed responsibility for a coordinated cyberattack that triggered false nuclear and chemical warfare alerts across both nations. The attacks, which occurred on Sunday evening, targeted air raid alert systems and emergency mobile applications, disseminating alarming messages to millions of civilians.
The incident began when Ukraine's air raid app, used by approximately 6.7 million people daily, was compromised. Among the false alarms were messages claiming Russia had launched a hypersonic missile capable of carrying a nuclear warhead, and others warning of a chemical threat to the capital, Kyiv. Some alerts also indicated the likelihood of street fighting.
Ukraine's air force initially suggested Russian interference, stating the system "appears to have been subjected to enemy influence." They quickly reassured the public that there was no radiation threat and temporarily suspended the affected app. A newly formed group named 'Hitcore' has since claimed credit for this hack.
Shortly after the attacks on Ukraine's systems, Russia's Ministry of Emergency Situations reported a massive cyberattack on its own mobile application. This led to false information being spread, including messages warning residents in the Belgorod border region of imminent nuclear warheads being launched across Russia and advising them to stock up on food for three weeks.
A pro-Ukrainian hacking group called Atesh posted a screenshot of the Russian alert and later claimed responsibility for the breach, though this claim could not be independently verified. The Kremlin downplayed the incident, characterizing the compromised app as a supplementary information source rather than a primary warning channel.
Civilians in Ukraine reportedly reacted with a mix of dismissal and terror, with some ignoring the alerts due to suspicion of hacking. The Ministry for Digital Transformation confirmed the app's temporary suspension while assuring the public that other alert systems remained functional.