False alerts in Ukraine: radiation, chemistry, and hypersonic missiles

The Air Alert app, used by 6.6 million users in January 2026 according to its developers, was compromised to send erroneous notifications in the Ukrainian capital, Kyiv. The messages, received late in the evening of Sunday, November 3, 2026, warned residents of a radiological hazard and a chemical attack, urging them not to leave. The app also displayed a nuclear alert on its online map, covering Kyiv and other areas, while mentioning a Russian hypersonic missile named Oreshnik, according to Recorded Future News.

Ukrainian authorities responded swiftly. The Ukrainian Air Force confirmed in a statement posted on Telegram that the app had been subjected to enemy influence and reassured the public that no real threat existed. The app’s developers, supported by the Ukrainian Ministry of Digital Transformation since 2022, disabled push notifications and temporarily suspended the service. They clarified that the app did not store personal data, thus limiting the risk of leaks, as reported by Fox News Digital.

Ukrainian authorities confirmed that the Air Alert app had been 'subjected to enemy influence,' noting that cybersecurity has become a major battleground in modern conflicts.

Responsibility claimed by pro-Russian hacker groups

A Telegram channel linked to Hitcore Corp, a group known for its cyber-hostile actions, claimed responsibility for the attack on Air Alert. The hackers referenced the Oreshnik missile in their communications, reinforcing the targeted and psychological nature of the operation. Meanwhile, another group, DC8044, claimed to have hacked Russia’s mobile app EMERCOM via its API, enabling the sending of false alerts about a nuclear attack. The Russian Ministry of Emergency Situations acknowledged the incident but assured that the official public alert system had not been affected, as confirmed by The Record.

These attacks are part of a broader strategy of hybrid warfare, as highlighted by Estonian Foreign Minister Margus Tsahkna, who notes a shift from military threats to cyber tactics and disinformation. In 2023, hackers had already targeted Russian commercial radio stations to broadcast false air attack alerts, according to the same sources.

What this changes here: risks for alert systems in West Africa

Cyberattacks on civil alert applications in Ukraine and Russia highlight a critical vulnerability in emergency communication systems, particularly in conflict or geopolitical tension contexts. For West African states, where digital infrastructure is rapidly developing but often remains underprotected, these attacks raise several challenges:

• System reliability: Applications like those used in Benin or Nigeria for weather, health, or security alerts could become prime targets for malicious actors seeking to spread panic or destabilize. A similar breach could paralyze crisis response, such as epidemics or natural disasters.
• Disinformation as a weapon: In West Africa, where social networks play a central role in information dissemination, false alerts could amplify rumors and panic movements, as seen during the coronavirus crisis or post-election tensions. Authorities should strengthen their ability to verify and rapidly disseminate official information.
• International cybersecurity cooperation: These attacks underscore the need for African countries to strengthen partnerships with entities like the Africa Union or organizations such as CERT-FR to share best practices in securing critical applications. Increased collaboration with cybersecurity experts could help anticipate and counter such threats.
• Infrastructure adaptation: Governments may be encouraged to diversify their alert channels, combining mobile apps, SMS, and public broadcasting systems (sirens, traditional media) to mitigate the impact of a targeted cyberattack.

Finally, these events remind us that cybersecurity is no longer a luxury but a strategic necessity, especially for administrations and businesses operating in sensitive sectors such as telecommunications, energy, or healthcare.

A worrying precedent: similar attacks in 2023

The Ukrainian and Russian application hacks are not isolated. In 2023, the group AnonGhost had already compromised Israel’s Red Alert app to send false alerts, including one claiming a nuclear strike. These attacks demonstrate a growing trend of targeting public alert systems to create uncertainty and disrupt social stability, as highlighted by The Record. For organizations in West Africa, this underscores the importance of monitoring cyber tactics evolution and investing in tailored security solutions.