So how did a phone app reach a loudspeaker?
Pollar Films
2 November
Synthetic voice (AI).
How it works
Watch 2:55
Preparing
2:55 left
Replay
Watch 2:55
From the story
Ukraine and Russia say hacks sent false nuclear alerts to residents
Transcript
On Sunday night,
some loudspeakers in Ukraine's Lviv region played a radiation warning.
There was no radiation threat.
Local officials blamed a phone app.
The app, Air Alert, tells millions of Ukrainians when to go to a shelter.
At 22:47 that night, it warned of radiation in Kyiv.
A minute later came a message in Russian.
It said a nuclear alert was coming for all of Ukraine:
"Don't worry, an Oreshnik is on its way."
Oreshnik is a Russian nuclear-capable missile.
Then it warned of a chemical attack, and of street fighting in Kyiv.
One independent alert map logged 122 false alerts in 7 minutes.
15 minutes in, Ukraine's air force posted: "There is no radiation threat whatsoever."
Just after midnight, the app's team said outsiders had interfered with it,
and switched off its notifications.
So how did a phone app reach a loudspeaker?
Lviv's officials said on Monday that during the app's failure,
the official alert map turned red.
And the speakers that sounded were mostly small warning systems at individual sites,
which take their signal from that map.
Two companies built Air Alert in 2022.
Officials in each region send it the alert, and the app passes it on.
It reaches 6.7 million daily users, by the company's count in March.
Other alert maps,
some sirens and the doors of more than 400 shelters take the same data.
Two things were faked.
Alerts, which reached phones, maps and speakers.
And free-text messages, like the one about Oreshnik.
Who got in, and how?
Ukraine's government communications centre blamed Russia, pointing to the Russian text.
A Russian Telegram channel, Mash, reported that a group called Hitcore claimed it,
saying an administrator had opened a file they sent.
AP and NBC could not verify that.
Ajax, one of the two companies,
didn't answer a Ukrainian outlet's questions on who or how.
About 3 hours after the first fake alert, Russia's emergencies app was hit too.
The ministry said someone broke into its control panel
and sent a false message to 33 regions.
Reports say it warned of a nuclear strike.
A Kyiv hacking group, DC8044, said its followers did it, in response.
That hasn't been verified either.
That night, both governments said
their national warning systems were working normally.
The speakers in Lviv were mostly small systems that listen to the alert map.
Russia's ministry says it found the weak spot.
One of Ukraine's app makers says the investigation is still going.
More films
2:58
2:58
2:58
These published recordings don't tell us whether the AVE was warned.
30 October
2:16
2:16
2:16
So why does a Red Cross nurse have a military rank?
30 October
2:51
2:51
2:51
And then there's the part no company can freeze.
30 October
2:27
2:27
2:27
So who is sending the drones?
29 October
2:58
2:58
2:58
The answer doesn't name him, or say what he said.
27 October
2:56
2:56
2:56
So the question behind Friday's headline is still open.
27 October
2:41
2:41
2:41
So if Ukraine was behind it, was it a war crime, or a lawful act of war?
26 October
2:54
2:54
2:54
Will its votes win any seats at all?
26 October
Home
Brief
Live
Threads
Search