People across Ukraine and Russia faced a night of panic after hackers breached emergency alert apps and pushed bogus warnings about nuclear attacks. The alarming messages falsely suggested that nuclear weapons had been launched and that residents faced radiation and chemical threats.
Ukraine’s air raid alert channel confirmed [1] in a social media post that “unauthorized parties” had gained access to the app. The service was temporarily suspended as officials worked to address the breach and counter the false information.
Ukrainians regularly use the app to receive warnings about impending Russian missile and drone strikes. That made the compromised service a particularly potent vehicle for spreading fear, even though officials said the frightening claims were not genuine.
The hacked app issued alarming notices about high radiation levels and chemical attacks in Kyiv, according to officials. The service was eventually restored after the unauthorized messages disrupted a tool that Ukrainians rely upon for urgent security information.
The bogus posts were written in Russian and contained numerous spelling errors. They also mentioned Hitcore, a hacking group that was later connected to the attack through claims reported by a Russian Telegram channel.
BREAKING: Hackers just sent fake NUCLEAR STRIKE warnings through emergency alert apps in Russia AND Ukraine, hours apart.
This is what Covid looked like in week 1. A few alerts. A few headlines. Nobody called it a crisis.
Why this is a big deal: the app people trust to tell them when to run told them a nuclear strike was coming. In a war. It was a lie. Next time a real alert comes, who believes it?
Government systems and national data hit like this:
1/ Russia: its emergency alert app was hacked. The Emergencies Ministry says a “massive cyberattack” hit the app. It sent fake warnings of an incoming nuclear strike.
2/ Ukraine: hours earlier, the air raid app falsely warned millions of Ukrainians of a nuclear strike, with fake nuclear and chemical alerts in and around Kyiv. A fake message said Russia’s Oreshnik missile was deployed. Ukraine blames Russia.
3/ USA: the Federal Election Commission’s e-filing system was offline for nearly 41 hours after a “bad actor” tried to breach it. It temporarily hid spending by big donors ahead of tomorrow’s midterms. Voting was not affected.
4/ Japan: hackers got into its power and gas market watchdog’s website. Data of about 125,000 police officers and staff may be compromised. 723 cyber incidents by October 20, more than all of 2024 or 2025.
5/ Belgium: on October 28, a cyberattack on the finance ministry forced the online tax portal to shut down temporarily.
6/ Australia: in June, an OpenAI agent breached a government health statistics portal. In October, OpenAI said an agent also entered a New South Wales government site.
7/ Denmark: nearly 8.75 million national ID numbers stolen. The suspected hacker says AI created the program.
Experts named October “Black October.”
November is not even 2 days old.
Now zoom out.
Agent swarms are AI agents attacking together. One campaign used hundreds of them and broke into at least 440 print servers across 48 countries. 11 organizations in 26 seconds.
China: a China-linked group ran AI agents against 200+ organizations in at least 14 countries in 11 days. Foreign ministries included.
North Korea: about $6.36 billion stolen from Binance wallets, most in about 20 minutes. TRM Labs says North Korea did it.
This is just the start. More hacks are coming. More agent swarms. More hacking systems from China and North Korea. They will keep increasing.
Covid locked the streets. Hackers just faked a nuclear strike warning. Nobody is calling this a crisis yet. But Japan’s prime minister already said of the attacks on Japan: “The situation is serious.”
The Washington Post’s headline: “A wave of new cyberattacks is just getting started.”
Follow me for more.
— Whale Scan (@WhaleScan) November 2, 2026 [2]
Mash, a Russian Telegram channel with ties to the country’s security services, said it spoke with representatives of Hitcore. Those representatives claimed responsibility for the attack, according to the channel.
One false alarm claimed that Russia had launched a hypersonic Oreshnik missile capable of carrying a nuclear warhead. The message also falsely declared that a nuclear alert had been issued across Ukraine, adding another layer of manufactured terror to the breach.
Ukraine’s air force moved to calm the public after the fake alerts began circulating. “The air alert app appears to have been subjected to enemy influence,” the Ukrainian air force said in a statement.
The statement firmly rejected the radiation warning pushed through the compromised app. “There is no radiation threat! Stay calm and follow our updates on our channel!” the air force told the public.
Officials subsequently issued all clear messages and said public alert systems were operating properly. That included air raid sirens, which remained functional despite the disruption involving the mobile app.
The cyber chaos did not stop with Ukraine. A few hours later, officials with Russia’s Ministry of Emergency Situations reported that its own mobile app had also been struck by what they described as a massive cyberattack.
The attack generated false alerts about nuclear weapons and warned Russians that nuclear warheads had been launched against the entire country. The messages urged residents to gather three weeks of food and seek shelter in their cellars.
Russia’s Ministry of Emergency Situations largely dismissed the impact of the breach on its broader warning structure. Officials said the mobile app was not among the country’s primary public warning system channels and instead served as a supplementary information source.
One bogus message reviewed by Reuters made little effort to resemble an official government announcement. It included colloquialisms and expletives while attacking Russia as a “swamp,” another sign that the notices were not authentic emergency instructions.
The breaches showed how compromised alert services could send terrifying false claims directly to people accustomed to depending on such systems. In both countries, officials denied the nuclear warnings and worked to steer residents back toward functioning official channels.
Ukraine restored its affected app after the temporary suspension, while officials emphasized that other public alerts continued to work. Russia likewise said its compromised application was supplementary, even as users received false instructions concerning food supplies and shelter.
The overnight attacks combined nuclear warnings, claims of radiation danger, references to chemical attacks, and instructions to prepare for weeks in hiding. Officials in Ukraine and Russia responded by rejecting the messages, clarifying the status of their warning systems, and attempting to calm frightened users.