Ukraine and Russia report fake emergency alerts after cyberattack targets apps


Authorities in Ukraine and Russia say their emergency alert mobile apps were targeted by cyberattacks late Sunday, with users in Ukraine receiving false warnings of dangerously high radiation levels in the capital, Kyiv.

In a Telegram post late Sunday, Ukraine’s air raid alert channel said “unauthorized parties” had interfered with the app’s operation and that the service had been temporarily suspended. It warned users not to click on links in “suspicious notifications.”

Authorities in Ukraine said the app, which Ukrainians rely on to seek safety amid daily Russian missile and drone strikes, was restored overnight. The alerts — making false claims of high radiation levels, a chemical threat and public disturbances in Kyiv — were written in English with spelling and grammatical errors as well as in a mix of Russian and Ukrainian.

Read more…
Source:  AP News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Node Package Manager Supply Chain Attack

    September 18, 2025

    On September 15, the Node Package Manager (NPM) repository experienced an ongoing supply chain attack, in which the attackers executed a highly targeted phishing campaign to compromise the account of an NPM package maintainer. With privileged access, the attackers injected malicious code into widely used JavaScript packages, threatening the entire software ecosystem. Notably, the attack has ...

  • UK: Two teenagers charged over Transport for London cyber attack

    September 18, 2025

    Two teenagers have been charged in connection with a massive cyber attack which caused Transport for London (TfL) months of disruption. The National Crime Agency (NCA) says it believes the hack – which began on 31 August last year – was carried out by members of the cyber-criminal group, Scattered Spider. Thalha Jubair, 19, from east ...

  • “Shai-Hulud” Worm Compromises npm Ecosystem in Supply Chain Attack

    September 17, 2025

    Palo Alto Networks Unit 42 is investigating an active and widespread software supply chain attack targeting the Node Package Manager (npm) ecosystem. A novel, self-replicating worm, which is currently being tracked as “Shai-Hulud,” is responsible for the compromise of over 180 software packages. This attack represents a significant evolution in supply chain threats, leveraging automated propagation ...

  • Samsung patches zero-day security flaw used to hack into its customers’ phones

    September 16, 2025

    Samsung says it has fixed a zero-day security vulnerability that is being used to hack into its customers’ phones. The phone maker said the security flaw, discovered in a software library for displaying images on Samsung devices, allows hackers to remotely plant malicious code on Samsung devices running Android 13 through the most recent version, Android ...

  • RevengeHotels: a new wave of attacks leveraging LLMs and VenomRAT

    September 16, 2025

    RevengeHotels, also known as TA558, is a threat group that has been active since 2015, stealing credit card data from hotel guests and travelers. RevengeHotels’ modus operandi involves sending emails with phishing links which redirect victims to websites mimicking document storage. These sites, in turn, download script files to ultimately infect the targeted machines. The final ...

  • Gucci, Balenciaga and Alexander McQueen private data ransomed by hackers

    September 15, 2025

    Cyber criminals have stolen the private details of potentially millions of Balenciaga, Gucci and Alexander McQueen customers in an attack. The stolen data includes names, email addresses, phone numbers, addresses and the total amount spent in the luxury stores around the world. Kering, the parent company of the luxury brands, has confirmed the breach and says ...