On Sunday night, as the war in Ukraine ground through yet another week, the ordinary act of checking a phone became terrifying. At 10:47 p.m. local time, Air Alert, Ukraine’s widely used civilian warning app, began lighting up screens across the country with messages that made no sense—and yet, in the context of an invasion, carried an unmistakable weight: radiation, chemical threats, a nuclear attack, and even reports of street fighting in the capital, Kyiv. The app, developed by Ajax Systems and Stfalcon with support from Ukraine’s Ministry of Digital Transformation, had been built for a clear purpose: to warn civilians of incoming Russian missiles, drones, and other attacks. Since the full-scale invasion began, millions of Ukrainians have let its notifications dictate whether they move to a shelter, stay put, or continue their day on a knife’s edge. But on this night, the system was not transmitting reality; it was transmitting chaos. Not long afterward, in the early hours of Monday Moscow time, a similar attack struck Russia’s Emergencies Ministry app, sending false alerts to users in 33 regions about “nuclear warheads” being launched across the country, with instructions to stockpile food for three weeks and shelter in basements. The two attacks—hours apart, in opposing countries—were a vivid and unsettling reminder that in modern warfare, the channels designed to protect the public can be hacked and turned into weapons of panic.
The hacked Ukrainian app is one of many tools that have become part of everyday survival in wartime. Air Alert works alongside other warning systems, but for many civilians it is the first line of defense because it sends push notifications directly to smartphones. It is also, in some ways, an informal system: Ukraine’s air force uses official Telegram channels to share updates, and security analysts often provide more precise information about incoming strikes. This layered approach means that when the app malfunctioned, the first instinct of many people was not to run for a bunker but to open Telegram and search for official messages. The Ukrainian Air Force confirmed that the notifications were false just fifteen minutes after they started, at 11:02 p.m. local time. In a statement shared across multiple platforms, it said: “The Air Alert app appears to have been subjected to hostile interference. There is no radiation threat!” It urged residents to remain calm and follow official updates. But the damage of those fifteen minutes—the seconds of adrenaline, the indecision, the fear—cannot be measured in official statements. The false alert of a radiation threat is a particularly cruel message in a country that has lived through the Chornobyl disaster and understands the invisible terror of radiation better than most. The knowledge that the message was fake did not erase the spike in anxiety, nor did it stop some families from staying up late, too wired to sleep, replaying their emergency plans in their heads.
The response of Kyiv residents in the minutes between the false alerts and the official denial shows how war changes the way people process information. Some residents told CBS News they immediately recognized the notifications as fake after checking Telegram, where the air force maintains a much more granular and trusted stream of updates. But not everyone has Telegram, and not everyone has the luxury of being able to parse a chaotic situation at night. For elderly people, for those who live far from official sources, or for those who simply happened to have their phones on silent, the alerts could have caused a very different reaction. A photograph from the evening shows a smartphone glowing with alert notifications, the words “nuclear alert,” “chemical threat,” and “street fights” stacked on the screen like a dark parody of ordinary smartphone notifications. That image captures the new normal of life in a besieged country: civilians constantly monitoring their phones, weighing the credibility of every beep, and relying on a patchwork of official channels and military analysts to separate fact from fabrication. Over time, many Ukrainians have developed a kind of information resilience. They know which voices to trust, which channels are accurate, and how to wait for confirmation before acting. But a hack is designed to exploit that exactly—to flood the zone with enough falsehood that even the truth becomes hard to believe. The fact that so many people kept their composure is a testament to that resilience, not a sign that the attack was harmless. It is also a reminder that in a war fought with both missiles and messages, the most valuable defense may be a civilian population that refuses to be frightened into paralysis.
On the Russian side, the hack was no less dramatic, though the context was different. At 2:45 a.m. Moscow time—a few hours after the Ukrainian app was struck—Russia’s Ministry of Emergency Situations app sent false alerts to users in 33 regions. The messages claimed that nuclear warheads were being launched across the country, and they advised residents to stock up on food for three weeks and take shelter in basements. For a society whose media is tightly controlled and whose leaders have repeatedly raised the specter of NATO encroachment, a sudden missile warning in the middle of the night is a deeply alarming experience, even if it is quickly dismissed. Russian state media, which is generally reluctant to acknowledge vulnerabilities in state institutions, covered the incident, reporting that the ministry had discovered a vulnerability in the app’s administrative panel. Officials said they disconnected and isolated the affected services. The speed of that response, and the fact that Russian authorities acknowledged the breach at all, suggests that the event was too public to hide. It also underscored a bitter irony: two countries locked in a brutal war, each armed with the same kind of emergency-alert infrastructure, both had that infrastructure used against them in a single night. While the exact source of the hacks was not identified, the pattern—limited, coordinated, designed to cause maximum psychological distress—fits squarely within the broader tactics of information warfare that have accompanied the conflict from the beginning. In both countries, the alert apps were built to save lives, but on that night they were used to test how far fear could travel through a smartphone.
Ukrainian authorities responded with characteristic restraint. The app’s developers said “unauthorized interference” had occurred, and they temporarily disabled push notifications and the app itself. Yurii Ihnat, a spokesman for the Ukrainian Air Force, emphasized that the hack had no impact on Ukraine’s security operations, noting that the Air Alert app is not affiliated with the country’s military command systems. This distinction matters: the app is a civilian tool, not a link in the military’s emergency-control network. Yet for the people who depend on it, the distinction was small comfort. The attack exposed how much of public safety in wartime depends on trust, and how vulnerable trust can be. It also revealed a quiet truth: the air force’s official Telegram channel has become the more reliable and authoritative source, which may be exactly why the hackers targeted the app instead. In a sense, the cyberattack was an admission that Ukraine’s official information gates are difficult to break directly, so the attackers went after a secondary channel. The strategy is not new—militaries have long targeted civilian communications—but the scale and the timing made it particularly sinister. It came at a moment when many Ukrainians were already exhausted, tired of sirens, tired of shelters, tired of the endless routine of war. A false alert of a nuclear attack is not just a glitch; it is an attack on the collective nervous system. Even after the notifications were disabled and the messages publicly labeled as fake, the episode left a residue of unease, a reminder that in the digital age, panic can be unleashed just as effectively from a keyboard as from a missile launcher. What remains, in the aftermath, is the slow rebuilding of a sense of safety—not physical safety, since that is already fragile, but the small confidence people need to look at a notification and decide whether to act or to ignore it.
The hacks did not happen in a vacuum. They occurred just as a temporary ceasefire around the southern Ukrainian city of Oleshky—occupied by Russia since 2022—was expiring at 10:59 p.m. Ukraine time on Sunday. The truce, credited by both sides to U.S. first lady Melania Trump and Pope Leo, had begun on Oct. 27 and allowed humanitarian aid to enter the city and some civilians to evacuate. Ukraine’s human rights commissioner, Dmytro Lubinets, said both sides had observed the agreement and were discussing further humanitarian measures. The timing of the cyberattacks—just as the ceasefire was about to lapse—may have been coincidental, but in a war where nothing feels accidental, many will choose not to believe that. The broader lesson is not about which side was behind the hacks, or even about the technical vulnerabilities of mobile apps. It is about what it means to be a civilian in a conflict where the tools of ordinary life—smartphones, apps, Telegram, social media—are also battlefields. A phone is a lifeline, a source of information, a connection to loved ones. When it becomes an instrument of deception, the damage goes beyond the procedural: it shakes the very sense of stability that allows people to keep going. Yet the response of Ukrainians, in particular, was a study in composure. They did not panic. They checked their sources, waited for official confirmation, and then went back to the difficult work of living under siege. The ceasefire expired, the false alerts were dismissed, and the war continued. But the patience and discernment shown by ordinary people in the face of engineered chaos is a kind of victory that no hack can take away.