#4Tech
Ukraine and Russia alert apps sent false nuclear warnings after hacks
Both official apps pushed fake threats; sirens and other channels kept working.
2 Nov 2026, 14:24 · All sides · Written by Grok
10 sources · 4 countries🇺🇸 🇺🇦 🇬🇧 🇱🇻
- On the evening of November 1, 2026, Ukraine’s official Air Alert app pushed false nationwide red-level air-raid alerts, plus Kyiv warnings of radiation, chemical danger, and street fighting.
- Early the next day, Russia’s Emergencies Ministry app told users in 33 regions that nuclear warheads were inbound and that they should stock food and hide.
- Both governments said the apps had been interfered with, and both said their main public warning systems still worked.
How the views differ
Ukrainian official narrative and pro-Ukraine voices
Ukrainian officials treat the false alerts as enemy action, not a glitch or a random prank.
They read the Russian-language note about the Oreshnik missile, and the timing after a ceasefire breakdown, as signs that Russia or Russian-aligned actors went first.
In that reading, the breach of Russia’s Emergencies Ministry app hours later looks like Ukrainian retaliation, or a separate action running alongside the war.
- cnn.com (Ind.)
- washingtonpost.com (Ind.)
- kyivindependent.com (Ind.)
- bbc.com (St.)
- reuters.com (Ind.)
Russian state narrative and pro-Kremlin channels
A pro-Kremlin channel, Mash, said a Russian group called Hitcore took credit for the Ukraine breach and claimed an administrator was tricked into downloading malware.
Russia’s Emergencies Ministry confirmed its own app was attacked and that false nuclear messages reached 33 regions, while insisting sirens, TV, and SMS never failed.
In that reading the second hack is a Ukrainian or pro-Ukrainian reply, not one Russian campaign hitting both countries.
- @BrianMcDonaldIE (X)
- reuters.com (Ind.)
- meduza.io (Ind.)
- washingtonpost.com (Ind.)
- bbc.com (St.)
- firstpost.com (Ind.)
- View B — @BrianMcDonaldIE: “Mash reports that Russian hacker group Hitcore has claimed responsibility for breaching Ukraine's air-raid alert app tonight, allegedly after tricking an administrator into downloading a…” — [X]() Open on X ↗
Both breaches happened. Ukraine’s app and Russia’s Emergencies Ministry app each sent false, nuclear-themed warnings, and each government confirmed interference in its own app. Other channels — sirens in both countries, plus TV and SMS in Russia — were not knocked out. That much is backed by the governments involved and by several independent outlets. Who did it is not established.
Grey areas. Ask to dive deeper
Grok checks every side again and answers with sources.
Popular questions
Ask anything about this story. It's free with an account, 1 a week.
- February 2014
Russia annexes Crimea following a referendum not recognized by Ukraine or most governments.
- April 2014
Armed conflict begins in Ukraine’s Donbas region.
Coverage
10 sources · 4 countries
- State-funded 7
- Independent 2
- X / on the ground 1
USUAGBLV
All sources
- Meduza (independent Russian)Ukraine’s app confirmed “unauthorized interference,” and push notifications were switched off. MeduzaState-funded · Latvia
- CNN (independent international)The Ukrainian Air Force said there was “no radiation threat” and the app had “likely been subjected to hostile interference.” CNNState-funded · United States
- Washington Post (independent international)One false message, written in Russian, referred to a nuclear alert and Russia’s Oreshnik missile. Washington PostState-funded · United States
- pravda.com.uaRussia’s ministry confirmed a “massive cyberattack” that sent false “NUCLEAR WARHEADS ON P1-SUN DELIVERY SYSTEMS” warnings “across ALL regions of Russia”; sirens, TV, and SMS were unaffected. Ukrainska PravdaIndependent · Ukraine
- privacyaffairs.comA claimed confession by a group called Hitcore, and any link between the two hacks, is not confirmed by independent sources. Privacy AffairsIndependent
- kyivindependent.comGovernment channels framed the hack as an attack on the system civilians use to decide whether to shelter. Kyiv IndependentState-funded · Ukraine
- BBC (independent international)International outlets carried that account, while also reporting that who hit the Russian app is not established. BBCState-funded · United Kingdom
- Reuters (independent international)Sources: Ukrainian Air Force / SPRAVDI; BBC; CNN; Washington Post; Reuters; Kyiv IndependentState-funded · United Kingdom
- @BrianMcDonaldIEMash, relayed by journalists, said Hitcore claimed access after a malicious file was opened. Brian McDonald on XX / on the ground
- firstpost.comSources: Russia’s Emergencies Ministry via TASS, cited by Reuters; Mash, via Washington Post; Meduza; BBC; FirstpostState-funded