Zelensky Confirms Ukraine Hacked Russia Back After Cyberattacks Spread Fake Nuclear Warnings Across Both Countries

Ukrainian President Volodymyr Zelensky confirmed that Ukraine launched a retaliatory cyberattack against Russia after its emergency warning application was compromised. During an exclusive PBS News interview on November 2, 2026, Zelensky accused Moscow of targeting Ukrainian civilian communications, revealing a direct response to an intrusion that spread fabricated warnings about nuclear and chemical threats.

Zelensky directly blamed Russia for the initial intrusion, telling PBS journalist Amna Nawaz: «They attacked our system,» before adding: «It was a cyber attack.» His statements marked a significant development following two incidents initially reported as potentially unrelated. However, publicly available technical evidence has not independently established who carried out the original Ukrainian breach.

The Ukrainian Air Alert application began sending alarming notifications late on November 1, warning residents of dangerous radiation levels in Kyiv, chemical attacks and fighting in the streets. Another message falsely claimed that Russia had launched its nuclear-capable Oreshnik missile. The fabricated alerts reached civilians accustomed to receiving genuine warnings about incoming attacks.

Ukrainian officials quickly identified suspicious activity and temporarily suspended notifications from the compromised application. The Ukrainian Air Force reassured residents that no radiation threat existed and directed them toward verified military communications. Some messages contained unusual language and spelling mistakes, helping users recognize the deception. The application was subsequently restored following technical intervention.

Hours later, Russia’s Ministry of Emergency Situations reported that its own warning application had been compromised. Users across 33 Russian regions received fabricated notifications claiming that nuclear warheads had been launched. Authorities acknowledged that hackers had distributed false information while maintaining that other emergency communication channels, including sirens and broadcasts, remained operational.

Kremlin spokesman Dmitry Peskov addressed the incidents by warning that government electronic infrastructure faces persistent cyber threats. Russian authorities investigated the compromised application but did not publicly identify the perpetrators. The apparent similarities between the two incidents raised questions about coordination, although Moscow had not independently established who was responsible for the Russian intrusion.

During his PBS interview, Zelensky defended Ukraine’s response, declaring: «We only respond on their attacks,» He further explained: «when it was very clear … that it’s their personal attack against our people, civilians, of course, we responded,» The remarks explicitly connected Ukraine’s retaliatory operation to what Zelensky described as an attack targeting civilians.

A hacking group calling itself Hitcore claimed responsibility for compromising Ukraine’s warning application, according to the Russian Telegram channel Mash. The group reportedly alleged that access was obtained through an administrator’s infected computer. Its account has not been independently verified, and investigators have not conclusively established whether the hackers operated under Russian government direction.

The fabricated notifications exposed a serious vulnerability in systems intended to protect civilians during wartime. Residents depend on emergency applications to determine when they should seek shelter from incoming missiles and drones. Although some recognized the unusual warnings as fraudulent, others experienced alarm, demonstrating how manipulated information can create confusion during dangerous situations.

Beyond the immediate disruption, repeated false alerts could undermine confidence in emergency communication systems. Civilians who become accustomed to fabricated warnings might hesitate when genuine threats emerge. Cybersecurity specialists have highlighted the importance of maintaining reliable alternative channels, especially during conflicts where delayed responses to authentic warnings can have potentially life-threatening consequences.

The incidents occurred as Russia’s war in Ukraine continued, with renewed military activity reported following the expiration of a localized ceasefire in the Kherson region. Years of missile strikes and drone attacks have made emergency warnings essential to civilian survival. The retaliatory cyberoperation illustrates how digital warfare can increasingly intersect with public safety.