Early on Nov 2 Moscow time (evening of Nov 1 in the US), Russia's Emergencies Ministry (MChS) said its mobile app "has been hit by a massive cyberattack, allowing perpetrators to send out fake information to the public" and that work was under way to fix the vulnerability and restore normal operation. RIA Novosti carried the statement at 03:31 MSK, and the ministry's regional offices republished it.

• The fake alert: sent in the name of Russia's unified emergency warning system under the headline "Threat of action" ("Ugroza dvizhukhi"), it claimed nuclear warheads mounted on P1-SUN drones (a Ukrainian attack drone) had been launched at all regions of Russia and told people to stock up on food for three weeks and hide in their basements, using obscene and Ukrainian-language slang. Local outlets in Perm and Yekaterinburg reported receiving it; E1.RU says the same text was also posted twice in the MChS Sverdlovsk region channel on the state messenger Max.
• Scope per MChS: the ministry says the hack "has not had, and cannot have, any impact" on public warning through sirens, loudspeakers, SMS, TV and radio, and calls the app "only an additional, ancillary" information service.
• Attribution: none official. The BBC notes the Ukrainian partisan group Atesh posted about the hack on Telegram with a screenshot the BBC could not verify.
• Context: it came a few hours after Ukraine's own Air Alert app pushed fake radiation, chemical and Oreshnik warnings (covered on this site). How either app's push system was reached has not been disclosed.

Takeaway for defenders: two national alerting apps were abused within hours of each other, which points at the push-publishing back end (operator accounts, admin consoles, third-party notification services) rather than the core siren systems. Anyone running mass-notification tooling should require phishing-resistant MFA and two-person approval for broadcast sends, restrict console access by network, and alert on sends outside normal templates or hours.