Information Warfare — 2026-11-03

Russia's and Ukraine's Emergency Alert Apps Hacked With False Nuclear and Air Raid Warnings

BLUFSimultaneous compromises of both nations' emergency alert apps reveal a shared vulnerability in phone-based warning systems that erodes public trust and could blunt response to genuine threats.

Ukraine's Air Alert app, built by Ajax Systems with 6.6 million users as of January 2026, pushed false radiation, chemical, street-fighting and Oreshnik warnings late on Sunday, and Ukraine's Air Force said it was likely compromised by the enemy 12. A Recorded Future News reporter received the alerts, one of which linked to the Telegram channel of a previously unknown group, Hitcore Corp, that claimed the breach 1. Hours later, Russia's emergencies ministry said a "massive cyberattack" on its Emercom app sent a false nuclear-launch alert to 33 regions, and that it had identified the exploited vulnerability 2. The Kyiv-based group DC8044 claimed the Russian intrusion via the app's API, while CNN reported it is unclear whether the two incidents are linked 12.

Analysis
Both Kyiv and Moscow now face the same weakness: a supplementary phone channel can push panic messages that sirens, loudspeakers and broadcasts cannot quickly contradict. Each app was compromised through its own software, and both governments acknowledged it. Few people appear to have acted on the alerts, but a Russian user who deleted Emercom says trust in official apps is eroding. Since the November 2 edition, Hitcore Corp has claimed the Ukrainian breach and Russia's app has been hit too. Attribution rests on unverified hacker claims from Hitcore Corp and DC8044, so a common actor or method is unconfirmed. The incidents may be unrelated opportunistic hacks, with DC8044's intrusion a retaliation rather than part of a coordinated state operation. Confidence is high, based on consistent accounts across three outlets and official statements from both governments.

3 sources

Russian and Ukrainian hackers hijack emergency apps to spread fake nuclear attack warnings - The Record (Recorded Future News)
Fake warnings of nuclear attack posted on hacked Russian and Ukrainian emergency apps - CNN
The Cyber Express