Cyberattacks trigger fake nuclear emergency alerts across Ukraine and Russia mobile apps

Authorities in Ukraine and Russia reported that their official emergency alert mobile applications were targeted by cyberattacks late Sunday, according to DataBreaches.net. The attacks compromised app systems on both sides, causing mobile app users in Ukraine to receive false warnings of an imminent nuclear threat as a limited ceasefire came to an end. [1]

It remains unclear if the mobile app intrusions late Sunday were directly coordinated with other military actions, DataBreaches.net reported. Officials have not identified the exact security vulnerabilities or entry vectors that allowed the hackers to broadcast the unauthorized emergency notifications. [1]

As FTMQ Security reported earlier, cyber campaigns targeting Ukrainian infrastructure have frequently involved specialized malware. A Russia-aligned threat group designated UAC-0099 has previously targeted organizations in Ukraine across government, energy, finance, and media sectors using updated versions of the MATCHBOIL downloader. [10]

The false alert incidents coincided with a resurgence in kinetic attacks. The BBC and The Guardian both reported that Russian strikes hit humanitarian hubs and medical facilities in Ukraine, while the Financial Times reported massive strikes against the energy infrastructure of Ukraine. [2][3][6]