Bluesky Accounts Compromised in Russian Disinformation Campaign

• •Hundreds of Bluesky accounts were hijacked to spread anti-Ukraine propaganda.
• •The campaign is linked to the Russian firm Social Design Agency (SDA).
• •Bluesky removed 4,907 accounts in 2026, doubling the previous year's removal rate.

A Russian influence campaign has hijacked hundreds of Bluesky accounts, primarily belonging to journalists and academics, to disseminate propaganda against Ukraine. Researchers from Clemson University identified the Moscow-based firm Social Design Agency (SDA) as responsible for this operation, which utilized real accounts instead of fake ones. Affected individuals reported unauthorized posts on their accounts, with at least 200 accounts confirmed compromised. Bluesky has removed 4,907 accounts linked to state-backed influence activities in 2026, a significant increase from the previous year. The compromised accounts were primarily older and dormant, although some active accounts were also affected. Bluesky clarified that their systems were not breached; rather, the hijacking occurred through leaked credentials. The campaign is part of a broader strategy known as Matryoshka, which involves impersonation and disinformation tactics.