Russia-linked operators are hijacking real Americans’ social media accounts on Bluesky to pump out election-season lies, and the fight over who controls the narrative is now directly aimed at Trump voters.
Story Snapshot
- Researchers say a Russian-linked network used hacked or compromised Bluesky accounts to push pro-Kremlin narratives and distort facts around the war in Ukraine.
- The campaign resembles the “Doppelgänger” operation that United States and European investigators already tied to Russian state-directed propaganda infrastructure.
- One false Bluesky post tried to pin the April 25, 2026, attempted assassination of President Donald Trump on Ukraine, highlighting a direct threat to U.S. political stability.
- The operation aims to erode trust in Western institutions and media, raising hard questions about free speech, censorship, and Big Tech’s gatekeeping power.
How the Bluesky hacking campaign works and why it targets everyday users
Reports from Bluesky and independent researchers describe a coordinated network of accounts behaving in lockstep, many created recently and suddenly flooding the platform with replies that echo Kremlin talking points about Ukraine and Western support for the war effort.[1][5] Investigators say some of these accounts appear to be hijacked real profiles, giving disinformation the credibility of authentic American or European voices.[5] This approach makes it harder for normal users to spot propaganda or simply block obvious bot accounts.
According to analysis shared by Alliance for Europe, more than one hundred German-language Bluesky accounts became active on January 17 and collectively pushed nearly five thousand posts in just one week, a pattern consistent with a centrally run operation rather than organic conversation.[1] Researchers link this behavior to the broader “Doppelgänger” ecosystem, which uses cloned news sites, fake personas, and social-media swarms to seed and amplify pro-Russian narratives across multiple platforms at once.[1][2] That same pattern now appears to be testing Bluesky’s defenses.
From deepfake sites to hijacked accounts: the Doppelgänger model goes mainstream
United States Cyber Command summarizes Doppelgänger as a Russian-run disinformation network that clones legitimate media websites, publishes fabricated articles, and drives traffic using automated social media accounts and paid promotion.[2] The United States Department of Justice has separately seized dozens of domains allegedly operated by Russian public-relations cutouts under Kremlin direction to influence the 2024 presidential election and weaken support for Ukraine.[3] These efforts show that Moscow treats digital influence as a strategic weapon, not a side project, and is willing to violate foreign laws to reach American voters directly.
Researchers tracking Russian online warfare note that these operations do not simply blast one message; they tailor themes to specific audiences, including conservatives, with content designed to fuel distrust, anger, and hopelessness.[7][8] Past campaigns on other platforms mixed genuine grievances about border security, inflation, and censorship with deliberate falsehoods, hoping to fracture the American public rather than persuade it with open argument.[7] The shift to hijacking Bluesky accounts continues this playbook, but with a darker twist: turning ordinary citizens’ profiles into unwilling megaphones for a foreign state.
False Trump-assassination narrative shows how close this gets to home
Coverage of the Bluesky campaign highlights one especially alarming example: a fabricated post that tried to connect Ukraine to the April 25, 2026, attempted assassination of President Donald Trump.[5] That narrative, if believed, would not just distort foreign policy debate; it could inflame domestic tensions, divide Trump supporters, and undermine any serious investigation into who actually planned the attack. Researchers say this weaponized rumor fits the broader Kremlin pattern of tying violent events to its enemies regardless of evidence.[5][8]
For conservatives who already distrust mainstream media spin, this creates a double bind. Foreign propagandists exploit legitimate skepticism by packaging lies inside stories that sound like something corporate media might be hiding.[7] At the same time, left-leaning fact-checkers and censorship advocates seize on Russian interference as a pretext to demand even more aggressive moderation that usually lands hardest on right-of-center speech. The Trump administration now faces the challenge of protecting open debate while stopping foreign actors from turning conservative platforms into chaos machines.
Guarding free speech without handing Big Tech a censorship blank check
Long-running research on Russian information warfare shows that Moscow’s goal is to undermine trust in institutions, elections, and independent media in the United States and Europe.[4][8] When Americans cannot tell what is real, they either tune out entirely or fall into echo chambers where any uncomfortable fact can be dismissed as “propaganda.” That outcome serves authoritarian regimes abroad and big-government bureaucrats at home who benefit from a discouraged, divided, and politically paralyzed public.
It is reported that Russia-linked actors have taken over genuine Bluesky accounts to spread Kremlin-backed disinformation about Ukraine using AI-generated content and coordinated networks. This campaign, dubbed "Matryoshka," signals a shift toward more sophisticated and covert…
— daily_stats_thoughts (@techno_stats) May 22, 2026
Trump voters should draw two lessons from the Bluesky campaign. First, foreign disinformation is real, targeted, and sometimes wrapped in rhetoric that sounds friendly to our side, especially on issues like Ukraine and globalist institutions.[2] Second, the answer is not to hand Silicon Valley censors a free pass to erase anything they label “Russian” or “harmful.” The better path is transparency, user control, and strong penalties for foreign cutouts who hijack Americans’ voices, all while keeping the First Amendment and open debate firmly intact.[3][4]
Sources:
[1] Web – Russian Influence Operation Doppelgänger Expands to Bluesky
[2] Web – Russian Disinformation Campaign “DoppelGänger” Unmasked
[3] Web – Justice Department Disrupts Covert Russian Government …
[4] Web – Russian cyber and information warfare and its impact on the EU and …
[5] Web – Russia is hacking its way onto social media platform Bluesky to …
[7] Web – Russian Twitter disinformation campaigns reach across the …
