The key facts

  • EMERCOM confirmed a massive cyberattack on its mobile app and the distribution of fake information through it
  • The ministry is fixing the vulnerability and warned that messages via the service may be unreliable
  • According to media reports, fake messages simultaneously appeared in the channels of EMERCOM, the RSChS, and regional operational headquarters, including the Belgorod region

What happened

Russia's Emergency Ministry (EMERCOM) reported a massive cyberattack on its mobile application. According to the ministry, 'attackers managed to send fake information to the population.' The press service published a message in its channel on the 'Max' platform (Gazeta.Ru). Life.ru, citing the ministry's official statement, also notes that technical maintenance is underway on the official EMERCOM website.

Warning to users

EMERCOM clarified that specialists are already working to fix the vulnerability and restore the app's normal operation. While the technical work is ongoing, users are advised to bear in mind that messages received through the service may be unreliable.

Scale of the attack and related incidents

The Telegram channel 'Ostorozhno, novosti' reportedthat at around 2:45 a.m., fake messages about an alleged launch of nuclear warheads at Russia simultaneously appeared in the channels of EMERCOM and Russia's RSChS (Unified State System for Emergency Prevention and Response), in the ministry's app, and in the channels of regional operational headquarters (Gazeta.Ru). The operational headquarters of the Belgorod region separately reportedthat its Telegram channel had been subjected to an external attack: after two o'clock in the morning on November 2, repeated messages began appearing in it with crude language, false threat warnings, distorted 'recommendations,' and profanity.

Mirror attack in Ukraine

According to Gazeta.Ru, the attack on EMERCOM's resources was a 'mirror' one: on the night of November 2, the Ukrainian app 'Air Alert' was hacked, and for a short period of time, according to the publication 'Strana,' it sent warnings about a radiation hazard, a chemical threat, street fighting, and an 'Oreshnik' strike. Responsibility for the hack was claimed by Russian hackers from the Hitcore group. This information is cited from the aforementioned publications and has not been independently confirmed.

A hacker stole data from 15,000 accounts of Slovenian civil servants