Ukraine and Russia Report Hacking of Emergency Alert Apps Amid Renewed Fighting

Ukraine’s Air Alert app and Russia’s emergency services app were both targeted in cyberattacks Sunday and Monday, sending false warnings of nuclear and chemical threats to citizens in both countries. Ukraine’s Air Force reported its app was compromised, displaying alerts about radiation, chemical attacks, and street fighting, while Russia’s Ministry of Emergency Situations said its app disseminated false information about drone attacks. The incidents occurred as a six-day ceasefire in the Russian-occupied Kherson region expired, with both sides accusing each other of using the pause to reinforce positions.

The Ukrainian Air Force urged calm, stating there was no radiation threat, and temporarily suspended push notifications while addressing the breach. The app’s creators confirmed unauthorized interference. In Russia, the Ministry of Emergency Situations acknowledged a “massive cyberattack” and said it was working to address the issue. The Telegram channel Hitcore claimed responsibility for the Ukrainian hack, according to the Russian Telegram channel Mash, though this claim could not be independently verified.

As the ceasefire ended, fighting resumed in Kherson, with a Russian drone striking a hospital. Ukraine’s General Staff accused Russia of using the truce to rotate troops, fortify positions, and deliver ammunition, while Moscow countered that Ukraine could have used the time to regroup. President Zelenskyy stated October was the deadliest month for Russia since the invasion began, claiming Russian losses totaled 54,400 troops. Footage shared with Sky News showed Russian military equipment being deployed in Oleshky, a city near Kherson.

Many Ukrainians reacted to the false alerts with skepticism, sharing memes online. The State Emergency Service of Ukraine reported Monday that the national alert system was operating normally. The incidents raise concerns about the vulnerability of critical infrastructure to cyberattacks and the potential for disinformation during ongoing conflict.

Where they differ

• NBC News and Al Jazeera highlighted the reaction of Ukrainians to the false alerts, noting widespread skepticism and memes shared online, while other sources focused more on the technical aspects of the hacks.
• CNBC emphasized the expiration of the ceasefire in Oleshky and the resumption of fighting, including a Russian strike on a hospital, while other sources provided this information as part of a broader overview.
• Meduza provided additional detail on the technical aspects of the hacks, noting that its translation process utilized AI and was reviewed by an editor.
• The Guardian reported a quote from a woman named Nina who was briefly terrified by the alerts, adding a personal element not found in other reports.

What is not yet known

• The identity of the hackers responsible for the attacks remains unclear, despite Hitcore claiming responsibility.
• The full extent of the damage caused by the cyberattacks to the emergency alert systems is not fully known.
• Whether the attacks were coordinated or independent remains unresolved.

Background

• Ukraine and Russia are engaged in ongoing conflict, with fighting concentrated in areas like Kherson [Fact Refinery, 2026-08-16].
• Ukraine has increasingly utilized drone technology in attacks targeting Russian territory, including Moscow and infrastructure [Fact Refinery, 2026-08-20].
• Russia has conducted numerous strikes on Ukrainian cities, often targeting civilian infrastructure and resulting in casualties [Fact Refinery, 2026-08-29].
• Emergency alert systems are considered critical infrastructure, and their compromise can lead to widespread panic and disinformation [background knowledge].

Our reading

Our reading is that the simultaneous targeting of emergency alert systems in both Ukraine and Russia represents a significant escalation in cyber warfare alongside the existing kinetic conflict. The false alerts, while quickly debunked in Ukraine, demonstrate a clear intent to sow confusion and fear among civilian populations. The fact that both countries were targeted suggests a deliberate attempt to undermine trust in official information channels, potentially as a precursor to further disinformation campaigns or military actions.

What to watch

• Confirmation of the identity of the group claiming responsibility for the Ukrainian hack, Hitcore, through independent verification [various sources].
• Reports detailing the full extent of the damage and vulnerabilities exposed in both Ukraine’s Air Alert app and Russia’s emergency services app [technical reports/government statements].
• Any changes in the intensity or nature of fighting in the Kherson region following the expiration of the ceasefire [frontline reports/military briefings].

Was this useful? 👍 0 👎 0

---

Read the original coverage