---
title: Russia's Emergencies Ministry says a "massive cyberattack" on its mobile app pushed a fake nuclear-strike alert nationwide, hours after Ukraine's Air Alert app was hacked | ctxsec
url: https://ctxsec.com/items/russia-mchs-emergency-app-hacked-fake-nuclear-alert-nov-2
description: "Overnight into Nov 2 Moscow time, users of the Russian Emergencies Ministry (MChS) mobile app across several regions received a mocking fake alert claiming nuclear warheads on Ukrainian 'P1-SUN' drones had been launched at all regions of Russia and telling people to stock food and hide. The ministry confirmed a massive cyberattack on the app, said it was fixing the vulnerability, and said sirens, SMS, TV and radio warnings were unaffected. No one has been officially attributed."
status: "official (Russian Emergencies Ministry statement, Nov 2, via TASS/RIA and regional MChS site); attribution unconfirmed"
published: 2026-11-01
---

> Overnight into Nov 2 Moscow time, users of the Russian Emergencies Ministry (MChS) mobile app across several regions received a mocking fake alert claiming nuclear warheads on Ukrainian 'P1-SUN' drones had been launched at all regions of Russia and telling people to stock food and hide. The ministry confirmed a massive cyberattack on the app, said it was fixing the vulnerability, and said sirens, SMS, TV and radio warnings were unaffected. No one has been officially attributed.

[← Cybersecurity News](/news) · [markdown](/items/russia-mchs-emergency-app-hacked-fake-nuclear-alert-nov-2.md)

official (Russian Emergencies Ministry statement, Nov 2, via TASS/RIA and regional MChS site); attribution unconfirmed

2026-11-01

### Russia's Emergencies Ministry says a "massive cyberattack" on its mobile app pushed a fake nuclear-strike alert nationwide, hours after Ukraine's Air Alert app was hacked

Early on **Nov 2 Moscow time** (evening of Nov 1 in the US), Russia's Emergencies Ministry (**MChS**) said its mobile app "has been hit by a massive cyberattack, allowing perpetrators to send out fake information to the public" and that work was under way to fix the vulnerability and restore normal operation. RIA Novosti carried the statement at 03:31 MSK, and the ministry's regional offices republished it.

- **The fake alert:** sent in the name of Russia's unified emergency warning system under the headline "Threat of action" ("Ugroza dvizhukhi"), it claimed nuclear warheads mounted on **P1-SUN** drones (a Ukrainian attack drone) had been launched at all regions of Russia and told people to stock up on food for three weeks and hide in their basements, using obscene and Ukrainian-language slang. Local outlets in Perm and Yekaterinburg reported receiving it; E1.RU says the same text was also posted twice in the MChS Sverdlovsk region channel on the state messenger Max.
- **Scope per MChS:** the ministry says the hack "has not had, and cannot have, any impact" on public warning through sirens, loudspeakers, SMS, TV and radio, and calls the app "only an additional, ancillary" information service.
- **Attribution:** none official. The BBC notes the Ukrainian partisan group Atesh posted about the hack on Telegram with a screenshot the BBC could not verify.
- **Context:** it came a few hours after Ukraine's own Air Alert app pushed fake radiation, chemical and Oreshnik warnings (covered on this site). How either app's push system was reached has not been disclosed.

**Takeaway for defenders:** two national alerting apps were abused within hours of each other, which points at the push-publishing back end (operator accounts, admin consoles, third-party notification services) rather than the core siren systems. Anyone running mass-notification tooling should require phishing-resistant MFA and two-person approval for broadcast sends, restrict console access by network, and alert on sends outside normal templates or hours.

Sources: [TASS: Russian Emergencies Ministry's mobile app hit by massive cyberattack (Nov 2)](https://tass.com/emergencies/2211609) · [RIA Novosti (Nov 2, in Russian)](https://ria.ru/20261102/mchs-2128519166.html) · [MChS Kuzbass regional office notice (in Russian)](https://42.mchs.gov.ru/deyatelnost/press-centr/novosti/5851610) · [59.ru: Perm residents received the fake alert (Nov 2, in Russian)](https://59.ru/text/gorod/2026/11/02/76738623/) · [BBC News live page](https://www.bbc.com/news/live/cm4g1yjxv38gt)