**
In a troubling development for social media integrity, Russian cyber operatives have infiltrated the Bluesky platform, hijacking hundreds of accounts to disseminate misleading narratives aimed at undermining support for Ukraine in the ongoing conflict. Since April, Bluesky has removed approximately 2,000 posts linked to this disinformation campaign, as detailed in a recent report by The New York Times. This incident highlights the evolving tactics employed by malign actors in the digital landscape.
The Nature of the Hacking Campaign
The recent hacking operation has been characterised by its sophistication and targeted approach. According to Darren Linvill from Clemson University’s Media Forensics Hub, the Russian hackers appear to be refining their methods, building on years of experience with fake accounts and misleading content. “They’re always experimenting,” Linvill remarked, indicating a continuous effort to innovate within their disinformation strategies.
The strategy of the hackers has involved targeting influential Bluesky users, including journalists, academics, and creative professionals, to amplify their reach. Reports reveal that the hackers accessed accounts of notable individuals, using them to spread fabricated news articles that mimic credible reporting. This tactic not only aims to mislead the public but also to create confusion by having these false claims debunked by fact-checkers, adding a veneer of legitimacy to the disinformation.
Bluesky’s Response to the Threat
In light of these security breaches, Bluesky has acknowledged the challenge posed by such coordinated disinformation efforts, describing it as an “industrywide problem”. The platform has committed substantial resources to detecting and mitigating these inauthentic campaigns, though several accounts have been compromised in the process.

One victim of this hacking scheme, Pamela Wood, a reporter at The Baltimore Banner, recounted her experience of being locked out of her account while on vacation. She discovered her account had been used to post a misleading video that falsely linked Ukraine to an assassination attempt on former President Donald Trump. “Bluesky didn’t provide much information but suggested that my account may have been hacked or compromised,” Wood explained, underscoring the confusion and concern that such breaches provoke among users.
The Broader Implications of Disinformation
Experts have pointed out that this hacking initiative is not merely an isolated incident but part of a broader Kremlin influence operation. These operations seek to manipulate public perception by crafting narratives that favour Russian geopolitical objectives. Joseph Bodnar, a researcher with the Institute for Strategic Dialogue, remarked on the unusual sophistication of this campaign, noting that the hackers were targeting users who are not only well-known but also respected within their fields. This strategic selection represents a departure from the random, less impactful tactics typically observed in social media disinformation.
Bluesky, which transitioned to a public platform in February 2024, has seen a surge in users, yet it remains dwarfed by competitors like X, which boasts nearly 600 million users. This nascent platform’s rapid growth, particularly following endorsements from high-profile figures such as Elon Musk, raises questions about its ability to safeguard user accounts against sophisticated cyber threats.
Why it Matters
The infiltration of Bluesky by Russian hackers reflects a dangerous trend in the social media landscape, where platforms are increasingly vulnerable to disinformation campaigns that can shape public opinion and influence political outcomes. As cyber warfare strategies evolve, the line between legitimate discourse and manipulated narratives becomes increasingly blurred. The ability to effectively combat such threats will be crucial for maintaining the integrity of online platforms and safeguarding democratic processes globally. This incident serves as a stark reminder of the need for robust security measures and vigilance against the pervasive threat of digital disinformation.
