Hackers send fake P1-SUN nuclear alert to Russian users

Unknown hackers compromised the mobile application used by Russia's Ministry of Emergency Situations to broadcast air raid alerts. The intrusion occurred on the night of November 1 and into the early morning of November 2. Attackers used the breach to transmit a false warning about a nuclear threat to the public.

The compromised app sent notifications claiming that nuclear warheads were launching on P1-SUN delivery systems across all Russian oblasts. The alert instructed users to stock up on food for three weeks and take shelter in basements. The Ministry of Emergency Situations described the incident as a massive cyberattack that allowed attackers to send fake information to the public.

This attack followed a similar breach of Ukraine's official Air Alarm application on the evening of November 1. That Ukrainian app displayed alerts in Russian regarding radiation, chemical hazards, street fighting, and Oreshnik missile threats. The Ukrainian Ministry of Digital Transformation and the State Emergency Service advised citizens on alternative ways to access air raid information. The app's team later confirmed the hack and paused service temporarily.

Russian officials stated that the country's public notification system continued to operate normally. They clarified that the app hack had not affected the wider notification infrastructure and could not affect it. The ministry added that efforts were underway to fix the app's vulnerability and restore normal functioning.

As of 04:00 on November 2, experts were still working to restore the app's functionality. The developers of the Ukrainian app promised to strengthen security to prevent future cyberattacks after partially restoring service.