A cyber attack compromised Ukraine's official air raid warning application on Sunday evening, triggering false alerts of an impending radiation threat in Kyiv alongside warnings of chemical hazards, street fighting, and nuclear strikes. Ukrainians are used to reacting to the warnings of Russian attacks sent via the air alert app. The Ukrainian Air Force confirmed the disruption on Telegram, urging citizens to stay calm and stating that hostile interference was suspected while clarifying there was no actual radiation risk.
The sequence of false alarms began nationwide at approximately 22:47 (20:47 GMT) when red-level air raid warnings were registered across the app. Shortly after, specific localized messages targeted users in the capital. The initial alert declared, "Radiation threat. Radiation threat declared in Kyiv." One minute later, at 22:48, a second message delivered in Russian stated: "Hi! There will be a nuclear alert across Ukraine. Don't worry, it's Oreshnik flying".
At 22:49, two consecutive alerts written in Ukrainian warned of immediate tactical dangers. The first cited a chemical risk, broadcasting, "Chemical threat. There is a threat of a chemical attack on Kyiv. Don't go outside." Simultaneously, another message reported a "Street fighting threat," asserting that "Street fighting is taking place in Kyiv. Don't go outside." The false warnings persisted until 23:53, when the application dispatched a series of all-clear notifications to users' phones, individually reversing each of the preceding Kyiv threat alerts.
The Ukrainian Central Intelligence Agency reported that a system failure within the application had caused public loudspeaker systems in the Lviv region to mistakenly sound the Radiation Hazard signal. Reassuring the public that no genuine danger existed, the agency urged citizens to cross-reference threat levels with official alternative information channels to confirm the status of active air strike risks.
To maintain public safety during technical disruptions, Ukraine's Centre for Countering Disinformation advised residents to rely on smartphone emergency notifications, remain alert to municipal sirens, and monitor verified state communication channels. Supported by Ukraine's Ministry of Digital Transformation, the Air Alert application provides real-time notifications regarding defense hazards. The ministry stated the system was temporarily taken offline for maintenance after being compromised, instructing residents to enable native emergency distress signals on their mobile devices.
Regional officials across Ukraine also addressed their communities via Telegram to dispel panic. Svitlana Onyshchuk, governor of the Ivano-Frankivsk Oblast, confirmed that local conditions remained quiet despite the app generating a red-level warning for the region between 22:50 and 23:57. Meanwhile, Vinnytsia regional head Natalya Zabolotna confirmed the cyber-attack on the application and warned residents against opening embedded links within the messages, noting they could be phishing attempts aimed at stealing data. Several leaders of other regions also posted on Telegram that the app had apparently been hacked and there was no local threat.
Only hours after the disruption in Ukraine, Russian state authorities announced that their emergency services application had also been hit by a cyber incident. Russia's Ministry of Emergency Situations stated that its system was targeted by a "massive cyberattack" that broadcast "fake information to the public," though neither the ministry nor Russian state media provided additional details.
Ukrainian news outlet UNN reported that the cyber operation against the Russian platform generated bogus warnings of nuclear attacks inside Russia. Atesh, a Ukrainian partisan movement operating within Russian-occupied territories, claimed responsibility for the disruption on its Telegram channel, posting screenshots alongside laughing emojis.
The screenshot posted by Atesh—which could not be independently verified—instructed Russian users to "urgently" gather provisions to survive three weeks and seek shelter in basements, utilizing obscene language within the prompt. Atesh has been contacted regarding the incident.
The cyber disruptions unfolded just minutes before the scheduled conclusion of a localized ceasefire in Ukraine's southern Kherson region. The temporary truce, initiated last Tuesday to facilitate the evacuation of civilians from the Russian-occupied city of Oleshky, officially expired at 23:00 on Sunday while active fighting persisted across other front lines. Russia, which maintains the world's largest nuclear arsenal and whose President Vladimir Putin has repeatedly indicated a willingness to employ all available weaponry, launched its full-scale invasion of Ukraine in February 2022.
Related Articles
Md. Kazi Bijoy is a dedicated tech enthusiast and content creator with a passion for digital innovation. With years of experience in the tech industry, he specializes in breaking down complex topics into easy-to-understand guides. When he isn’t writing, he explores the latest gadgets and researches emerging trends in the digital world.