Loading threat actor…
Hitcore Corp is a previously unknown hacking group that claimed responsibility for the compromise of Ukraine's Air Alert emergency-warning application. A fraudulent notification distributed through the compromised application linked to a Telegram channel associated with the group. The application's developers confirmed unauthorized interference, but attribution to Hitcore Corp has not been independently established. The incident involved fabricated warnings directed at Kyiv residents concerning radiation hazards, chemical threats and street fighting. The messages imitated legitimate emergency notifications, including the application's familiar announcement voice. Developers temporarily suspended the service and disabled push notifications before gradually restoring functionality and introducing additional security measures. Ukraine's national warning system and Kyiv's separate Kyiv Digital application remained operational. The group's origin, organizational affiliations, initial access method and broader operational history are not established.
Who, where, and from where this actor operates. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
Geographies tied to known operations.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.