{"id":"CMP-202611-nkucle","kind":"campaign","aliases":[],"related":[],"title":"Kyiv Independent hacked: subscribers got a fake Russian-language email saying a nuclear warhead was launched at Kyiv","description":null,"summary":"On 2026-11-04 the Kyiv Independent, a Ukrainian English-language news outlet, said one of its systems had been breached. Its subscribers received an email it did not send. The email was in Russian, falsely claimed a nuclear warhead had been launched toward Kyiv, and said Zelenskyy and Putin had joined forces. The attackers also tried to post similar messages on the website, and those were removed. Editor-in-chief Olga Rudenko says everything points to a Russian operation. Two days earlier, a similar false missile alert appeared in a Ukrainian air raid alert app. Which system was breached, and whether subscriber data was taken, is unknown.","severity":"medium","cvss":null,"epss":null,"exploited":true,"exploited_at":"2026-11-04T15:45:16+00:00","products":[{"name":"Kyiv Independent","fixed":[],"ecosystem":"vendor"}],"ecosystems":[],"tags":["campaign","disinformation","early-warning"],"not_affected_if":[],"how_to_check":"An email that appears to come from the Kyiv Independent, written in Russian, claiming a nuclear warhead was launched toward Kyiv and/or that Zelenskyy and Putin have joined forces. It is fake: the outlet confirmed it did not send it. The source gives no sender address or subject line.","fix":"Ignore and delete the message. Do not click its links or forward it as real. Check alerts only through official channels. Kyiv Independent subscribers should watch for more phishing using the outlet's name until it says the breach is resolved.","status":"open","published_at":null,"first_seen_at":"2026-11-04T15:45:16+00:00","triaged_at":"2026-11-04T15:45:16+00:00","updated_at":"2026-11-04T15:45:39+00:00","category":"other","confidence":null,"triage":null,"analyst_status":"done","analyst_note":null,"search":"'-04':33B '-11':32B '-202611':21A '2026':31B 'air':124B 'alert':119B,126B 'also':86B 'app':127B 'appear':120B 'attack':85B 'breach':51B,131B 'campaign':25B 'chief':102B 'claim':67B 'cmp':20A 'data':135B 'day':113B 'disinform':26B 'earli':28B 'earlier':114B 'early-warn':27B 'editor':100B 'editor-in-chief':99B 'email':11A,56B,62B 'english':40B 'english-languag':39B 'everyth':106B 'fake':7A 'fals':66B,117B 'forc':83B 'got':5A 'hack':3A 'independ':2A,36B 'independent':24A 'join':82B 'kyiv':1A,19A,23A,35B,75B 'languag':10A,41B 'launch':17A,73B 'messag':91B 'missil':118B 'news':42B 'nkucle':22A 'nuclear':14A,69B 'olga':103B 'one':45B 'oper':111B 'outlet':43B 'point':107B 'post':89B 'putin':80B 'raid':125B 'receiv':54B 'remov':98B 'rudenko':104B 'russian':9A,65B,110B 'russian-languag':8A 'said':44B,77B 'say':12A,105B 'send':60B 'similar':90B,116B 'subscrib':4A,53B,134B 'system':48B,129B 'taken':137B 'toward':74B 'tri':87B 'two':112B 'ukrainian':38B,123B 'unknown':139B 'warhead':15A,70B 'warn':29B 'websit':94B 'whether':133B 'zelenskyy':78B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"A","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["independent","kyivindependent"],"ptokens":["independent","kyiv"],"labels":["campaign","disinformation","earlywarning","medium","other"],"campaign_type":"breach","first_public_at":"2026-11-04T00:00:00+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"analyst","external_id":"CMP-202611-nkucle","url":null,"severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-04T15:45:16+00:00","fetched_at":"2026-11-04T15:45:16+00:00","note":null}],"documents":[{"id":68029,"url":"https://news.ycombinator.com/item?id=50367073","title":"Kyiv Independent reports system breach","kind":"post","source":"hackernews","publisher":null,"text":"Kyiv Independent reports system breach\nhttps://hromadske.ua/en/war/273759-kyiv-independent-reports-system-breach-after-readers-receive-fake-nuclear-attack-warning\n\n3 points, 0 comments on Hacker News","published_at":"2026-11-04T15:35:31+00:00","relation":"describes","confidence":null,"note":null},{"id":68038,"url":"https://hromadske.ua/en/war/273759-kyiv-independent-reports-system-breach-after-readers-receive-fake-nuclear-attack-warning","title":"Kyiv Independent reports system breach after readers receive fake nuclear attack warning","kind":"other","source":"analyst","publisher":null,"text":"The Kyiv Independent said one of its systems was hacked after subscribers received an unauthorized Russian-language email falsely claiming a nuclear warhead had been launched toward Kyiv and that Zelenskyy and Putin had joined forces. Editor-in-chief Olga Rudenko confirmed on 4 Nov 2026 the email was not sent by the newsroom and points to a Russian operation. Attackers also tried to publish similar messages on the website; removed. Two days earlier a Ukrainian air raid alert app displayed a similar false message about an incoming Russian missile.","published_at":"2026-11-04T00:00:00+00:00","relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}