Hackers spoof emergency apps in Ukraine and Russia

Cyberattackers disrupted emergency alert systems in both Ukraine and Russia late Sunday, injecting false warnings into mobile applications used by civilians to track missile and drone threats. In Ukraine, users received messages claiming dangerously high radiation levels, chemical threats, and public disturbances in Kyiv. The false alerts contained spelling and grammatical errors and were written in a mix of English, Russian, and Ukrainian.

Ukraine’s air raid alert channel announced on Telegram that unauthorized parties had interfered with the app’s operation. Officials temporarily suspended the service and advised users to avoid clicking links in suspicious notifications. The app, which residents rely on for safety during daily strikes, was restored overnight. One of the false posts referenced the hacking group Hitcore. Mash, a Russian Telegram channel linked to security services, reported that Hitcore representatives claimed responsibility, though the claim has not been independently verified.

Yurii Ihnat, a spokesman for Ukraine’s air force command, stated that the breach did not impact security or defense operations because the app operates separately from military command systems. He told 1+1 television that the air force continues to report real-time threats through independent channels, including social media platforms. Ukraine’s state-run Center for Countering Disinformation urged the public to monitor emergency channels on social media and rely on physical alerts while the cyberattack was addressed.

Russian officials reported on Monday that hackers gained access to the Russian Emergency Ministry's mobile app. The ministry did not identify the perpetrators but issued a statement reassuring citizens that the wider public alert system functioned normally. The ministry noted that the mobile app serves as a supplementary service alongside SMS messages, media broadcasts, and municipal sirens. Kremlin spokesperson Dmitry Peskov said that all state agencies face a constant threat from cyberattacks, including a growing number that utilize artificial intelligence. He said, “All government bodies must take steps to improve the cybersecurity of our digital resources.”

The cyber incidents occurred as a limited humanitarian ceasefire in the Kherson region expired at midnight on Monday. Ukrainian authorities reported multiple Russian drone attacks early Monday morning. The regional administration said a 62-year-old woman and a 73-year-old man were hospitalized with blast injuries in Kherson, which sits across the Dnipro River from Russian-occupied territory.

The ceasefire, which began on October 27, marked the most significant truce between Kyiv and Moscow since Russia’s full-scale invasion began nearly five years ago. The White House said U.S. First Lady Melania Trump helped broker the pause. Civilian negotiators from both sides also secured the agreement, which allowed for the evacuation of residents from the besieged city of Oleshky. An estimated 2,000 civilians were in Oleshky when the truce took effect. They could evacuate to territory controlled by either nation or remain with replenished food and medical supplies. Exact evacuation totals were withheld to protect those who stayed.

Ukraine’s general staff reported that Russian military forces used the ceasefire to bolster drone defenses and replenish ammunition supplies in the area. In the eastern Kharkiv region, emergency services reported that drone strikes injured 12 people and damaged a refrigeration facility, greenhouses, and residential buildings. In the Black Sea port city of Odesa, five people were injured when drones targeted a warehouse and damaged homes.

Russia’s Ministry of Defense stated on Monday that it had shot down 212 Ukrainian drones overnight. Vyacheslav Fedorishchev, the head of Russia’s Samara region, said local air defenses were repelling an aerial attack without providing further details. Independent Russian media outlets later reported that Ukrainian drones targeted one of Europe’s largest oil transport hubs in the Samara region.