Bluesky Accounts Compromised in Russian Disinformation Campaign

Bluesky Accounts Compromised in Russian Disinformation Campaign

First seen 29 May 2026, 19:05 UTC GigazineTheaustralian.Au 72% similarity 75.5

Article Content

Browse articles
ThreatCluster

A Russian influence campaign has hijacked hundreds of Bluesky accounts, primarily belonging to journalists and academics, to disseminate propaganda against Ukraine. Researchers from Clemson University identified the Moscow-based firm Social Design Agency (SDA) as responsible for this operation, which utilized real accounts instead of fake ones. Affected individuals reported unauthorized posts on their accounts, with at least 200 accounts confirmed compromised. Bluesky has removed 4,907 accounts linked to state-backed influence activities in 2026, a significant increase from the previous year. The compromised accounts were primarily older and dormant, although some active accounts were also affected. Bluesky clarified that their systems were not breached; rather, the hijacking occurred through leaked credentials. The campaign is part of a broader strategy known as Matryoshka, which involves impersonation and disinformation tactics.

Key Points: • Hundreds of Bluesky accounts were hijacked to spread anti-Ukraine propaganda. • The campaign is linked to the Russian firm Social Design Agency (SDA). • Bluesky removed 4,907 accounts in 2026, doubling the previous year's removal rate.

ThreatCluster AI

Timeline

2025-05-01
Bluesky begins tracking state-sponsored accounts
Bluesky initiated monitoring for accounts involved in public opinion manipulation, leading to increased removals.
Gigazine
2026-01-01
Bluesky escalates account removals
In 2026, Bluesky removed 4,907 accounts linked to state-backed influence activities, marking a significant increase in action.
Gigazine
2026-05-29
Clemson University reports on account hijacking
Researchers reveal that a Russian campaign hijacked hundreds of Bluesky accounts to spread disinformation, affecting notable figures.
Theaustralian.Au

Community

Browse all →

Tracked Entities in This Story