Millions in Ukraine and Russia Hit by Coordinated False Nuclear Alerts

A Day of Digital Chaos

Millions of citizens across Ukraine and Russia experienced a state of alarm on Sunday as their official government alert applications were hijacked to broadcast false warnings of imminent nuclear attacks. The incident, which affected both nations within hours of each other, has been attributed by both sides to significant cyberattacks that successfully bypassed security measures on systems designed to protect the public.

The Breach in Ukraine

The disruption began in Ukraine just before midnight. The country’s primary air raid alert application, which serves approximately 6.7 million users according to the Ministry of Digital Transformation and developer Ajax Systems, began pushing out a series of alarming notifications. Users initially received a warning regarding a “radiation threat in Kyiv.” This was followed by a message written in Russian, which stated: “There will be a nuclear alert across Ukraine. Don’t worry, it’s Oreshnik flying.”

The mention of the Oreshnik missile added a layer of psychological weight to the hoax. The Oreshnik is recognized as one of Russia’s most potent intermediate-range ballistic missiles, capable of traveling at ten times the speed of sound and deploying multiple warheads. Russia has previously stated that the weapon system is capable of carrying nuclear payloads.

Beyond the nuclear threat, screenshots circulating online indicated that the app also pushed false notifications regarding chemical attacks and reports of “street fights” occurring within the capital. The Ukrainian Air Force utilized its Telegram channel to clarify that there was no actual radiation threat, confirming that the application had been compromised. SPRAVDI, Ukraine’s center for strategic communications, issued a public statement via X, explicitly blaming Russian actors for the breach and advising citizens to disregard any irregular messages appearing in the app.

Similar Disruptions Inside Russia

Only hours after the Ukrainian incident, Russia’s emergency ministry reported that its own mobile application had been subjected to a “massive cyberattack.” The breach resulted in the dissemination of nonsensical and aggressive messages across regional air raid alert channels. According to reports, some of these messages contained vulgar language, while others made bizarre claims, such as suggesting that small Ukrainian interceptor quadcopters were delivering nuclear warheads to Russian territory. Another message urged the Russian public to stockpile three weeks’ worth of food.

Unlike the Ukrainian government, Russian officials have not yet formally attributed the attack to a specific entity. However, the incident marks a significant escalation in the ongoing digital warfare that has characterized the conflict between the two nations.

A History of Cyber-Interference

This event is not the first time digital infrastructure has been weaponized to spread fear among civilian populations. Both nations have engaged in persistent cyber campaigns throughout the war, frequently targeting public services and critical energy infrastructure.

Russia has previously faced similar disruptions. In February 2023, multiple private radio stations across the country were compromised, broadcasting fake air raid and missile alerts at a time when direct strikes on Moscow were infrequent. A week later, a subsequent breach affected both radio and television stations, forcing false emergency warnings onto the screens and into the homes of millions of Russians. As both nations continue to rely heavily on these digital alert systems to warn of genuine incoming threats, the vulnerability of these platforms remains a critical concern for public safety.

Source: businessinsider.com