On the evening of 1 November Ukraine's national air-raid alert app, Povitriana Tryvoha, was tampered with to deliver Russian-language fake alerts of nuclear and chemical attacks around Kyiv and an incoming 'Oreshnik' strike. In the early hours of 2 November Russia's emergencies ministry acknowledged that its official app had suffered a 'massive cyberattack' that pushed fake notices saying nuclear warheads had been launched across the country. On both sides, the civil-protection notification system itself became the target.
Hijacking the alert system and clearing it within an hour
Late on 1 November the Ukrainian Air Force said the alert system 'appears to have been subjected to enemy influence' and urged: 'There is no radiation threat! Stay calm and follow our updates on our channel.' The app, developed by Ajax Systems with the Ministry of Digital Transformation, pushed warnings of nuclear and chemical threats around Kyiv, 'street fighting' and an imminent Oreshnik strike, and street sirens sounded nationwide including in Zakarpattia. The developers said 'unauthorized persons have interfered with the application', disabled notifications, cleared the false alerts within about an hour, had the system normal by midnight and restored the app gradually by about 02:00 on 2 November.
The developers said the app stores no personal data and that additional security measures are being added. The SPRAVDI strategic communications centre blamed Russia, and the State Emergency Service warned of phishing links. The incident coincided with the end of the local ceasefire in Oleshky, Kherson region, which ran from 27 October to 1 November. The intrusion vector and the perpetrator have not been disclosed, and Russian involvement remains a Ukrainian claim.
A tit-for-tat chain and the cognitive effect
In the early hours of 2 November Russia's Ministry of Emergency Situations acknowledged on Telegram that its app had suffered a 'massive cyberattack' spreading 'false information'. Users reportedly received messages that nuclear warheads had been launched across Russia and should stock three weeks of food and shelter in basements. The ministry said it was patching the vulnerability, and Kremlin spokesman Dmitry Peskov said the president's website 'is subjected to cyberattacks many times a day, every day'. No claim of responsibility for the attack on the Russian side has been confirmed.
Both cases show that the alert app, the notification channel citizens trust most, can be turned into a device for spreading disinformation. If confidence in air-raid alerts erodes, behaviour during real attacks is affected, so the cognitive effect outlasts the momentary confusion. Ukraine's speed in clearing the false alerts within an hour and countering them on official channels sets a reference point for handling similar incidents.
Sources
Reporting
- 1
Ukraine's air raid alert system hacked, Russian system targeted hours later
Source checked 3 Nov 2026
Kyiv Independent · External site - 2
Russia, Ukraine air raid alert apps hit by cyberattacks after truce ends
Source checked 3 Nov 2026
Al Jazeera · External site - 3
Russia's Emergency Services App Hit by Cyberattack Following Hack of Ukraine's Air Alert App
Militarnyi · External site
From developments to evidence and analysis
Background
No explicit relationship is recorded.
Evidence
No explicit relationship is recorded.
Follow-ups / later versions
No explicit relationship is recorded.
Related questions
Cite this article
AI & Security Observatory（2026-11-02）「ウクライナの空襲警報アプリが乗っ取られ核・化学攻撃の偽警報 数時間後にロシア非常事態省のアプリも「核弾頭発射」の偽通知」『AI & Security Observatory』、第1.0版、最終更新2026-11-03。https://ai-security-observatory.org/ja/brief/brief-20261103-05/
AI & Security Observatory (2026-11-02). Ukraine's Air Alert app hijacked to push fake nuclear and chemical warnings; Russia's emergencies-ministry app hit hours later with 'nuclear warheads launched' messages . AI & Security Observatory, version 1.0. Updated 2026-11-03. https://ai-security-observatory.org/en/brief/brief-20261103-05/
Version 1.0 · Publication date 2 Nov 2026 · Updated 3 Nov 2026
Revision history
- Earlier revisions have not been recorded.