Hackers targeted Ukraine's national emergency alert system on Sunday night, distributing fraudulent nuclear and radiation warnings. The breach caused widespread panic across Kyiv and other regions before officials could restore the system.
The 10:47 p.m. surge of fake Oreshnik missile warnings
At approximately 10:47 p.m. local time, the Ukrainian national air raid alert application began broadcasting a series of fabricated and terrifying notifications . According to the report, the first message targeted Kyiv with radiation threats, which was quickly followed by a nationwide nuclear alert. This second wave of misinformation uniquely referenced the "Oreshnik missile," even advising citizens not to worry despite the severity of the warning.
The chaos continued as users received false reports of imminent chemical attacks and active street fighting within the capital, with instructions to stay indoors to avoid non-existent dangers. It took several minutes for multiple "all-clear" messages to be dispatched to correct the misinformation and reassure the public that the threat levels were not real.
SPRAVDI's attribution of the breach to Russia
Yuriy Ignat, a spokesman for the Ukrainian Air Force, confirmed that the application had been compromised by external interference. As reported by the source, the organization SPRAVDI used its X platform to attribute the cyber intrusion directly to Russia. To combat the confusion, the Ukrainian Centre for Countering Disinformation issued urgent statements to clarify that the broadcasted threats did not reflect reality, while officials urged citizens to monitor only official channels for accurate updates.
The collapse of the Melania Trump-brokered Kherson truce
This digital assault coincides with the end of a significant ceasefire in the Kherson region. This truce, which was brokered through the diplomatic efforts of US First Lady Melania Trump, had allowed for a vital humanitarian mission in the Russian-occupied city of Oleshky. Dmytro Lubinets, Ukraine's Parliament Commissioner for Human Rights, described the temporary cessation of fire as a vital step for the approximately 2,000 civilians remaining in the area.
However, Moscow's refusal to extend the agreement has returned the region to active combat, just as US-mediated talks between Moscow and Kyiv are scheduled to resume later this month. These diplomatic efforts have remained precarious since the joint strikes by the United States and Israel on Iran in February, which had previously stalled negotiations.
Why did the Kyiv-specific app remain unaffected?
While the national application was successfully breached, the report notes a curious discrepancy: a separate application dedicated specifically to Kyiv remained operational and untouched . This leaves significant questions regarding the technical vulnerabilities of the broader national infrastructure compared to localized systems and how hostile actors were able to bypass one while failing to compromise the other.
This combination of cyber disruption and physical combat underscores the intensifying nature of information warfare as the war enters its fifth year. The incident comes at a critical time, as President Volodymyr Zelensky warns that Russia continues to target energy infrastructure in preparation for the upcoming winter season.
Comments 0