Andrea Innocenti The Russian Federation's Ministry of Emergency Situations recently issued an official warning regarding a major cybersecurity incident. The agency, which manages air strike alerts, reported that its Air Alert app , used daily by millions of citizens to receive notifications of potential airstrikes, had been the target of a massive cyberattack.
The news was released via the Ministry's Telegram channel, emphasizing the urgency of informing the public about potential manipulation of emergency messages.
According to the release, cyber attackers successfully infiltrated the app's system, gaining the ability to inject false information intended for the general public. This type of compromise allows for the generation of deceptive alerts, which could lead citizens to panic or, conversely, ignore genuine alerts.
Security experts have characterized the incident as a " possible hostile influence ," citing hackers' ability to manipulate the flow of information in real time.
The statement from the Russian Ministry of Emergencies
Specifically, the Ministry specified that the attack was "massive" both in terms of the amount of data involved and the speed with which the fake news was transmitted.
The statement, published on Telegram, specifies that hackers exploited vulnerabilities not yet disclosed, managing to send misleading messages in an automated manner. The message also emphasizes that authorities are working to restore the app's integrity, but warns the public to verify the veracity of any warnings before taking action.
Mechanism for spreading false reports
Analysts who studied the case indicate that the attack leveraged a combination of malware and unauthorized access to backend servers. Once they gained administrative privileges, the attackers were able to insert fake alert messages into the app's distribution queue, ensuring they were delivered to all registered users. This approach makes it particularly difficult to distinguish a genuine alert from a manipulated one, especially in emergency situations where speed is crucial.
Ukrainian alert: similar warnings
Parallel to the Russian statement, the Ukrainian Air Force reported that Air Alert could provide incorrect data due to a " possible hostile influence ." The Ukrainian government, which uses the same app to warn civilians of possible airstrikes, expressed concern about the ability of external actors to interfere with notifications. The Ukrainian message, though more concise, reiterates the vulnerability of digital warning systems in conflict contexts, where accurate information is vital to the safety of the population.
Possible repercussions on civil security
The consequences of such compromises can extend far beyond simple information disruption. An incorrect alert could trigger unnecessary evacuations, crowding of critical infrastructure, or, conversely, cause the population to ignore a real danger. In war scenarios, trust in communication channels is crucial; a loss of that trust can weaken the authorities' ability to coordinate a response. For this reason, both Russia and Ukraine are intensifying security checks and urging users to check multiple sources before responding to any emergency notification.