Stop: BlueSky fake invites dropping malware

[German]Since Elon Musk took over Twitter and renamed it X, the social network BlueSky, created by Twitter co-founder Jack Dorsey, has experienced a boom. Access is currently only possible via invite code – i.e. recommendations from people who are represented on BlueSky. I have now come across a warning that there are mails on the way that pretend to be an invitation to BlueSky, but are ultimately intended to be used to spread malware (Trojans) or for phishing. If you need a BlueSky Invite, you can get it here on borncity.com for free and without risk. I currently have free codes available again.

BlueSky in a nutshell

BlueSky is a short messaging service with a user interface like the former Twitter, which was created and developed by former Twitter founder Jack Dorsey and Jay Grader. BlueSky is accessible via a web browser (see image below).

To do this, simply enter the URL bsky.app in the browser (I have always done this as a matter of habit. There is also a native BlueSky mobile app (iOS, Android) for access on mobile devices. However, not everything is displayed in the app. And there is the open source app Graysky, which offers more functions but does not display all the information.

BlueSky is currently still very much under development and in beta mode. Participation is only possible by invitation from BlueSky members via an invite code. This is intended to prevent excessive growth – despite this, the service has more than 1.3 million members. Every volte face on Twitter drives its users to BlueSky (provided they can get hold of an invite code).

Phishing and malware on it's way

This "invite-only" thing naturally arouses desires "why am I not in yet, I need access", and on the other hand of course calls cyber criminals onto the scene. Invite codes are being sold on the Internet (going up to ~10 US dollars) and phishing/malware campaigns are probably underway. I saw the following post on BlueSky a day ago.

The author of the post has posted a phishing/malware warning. He hears from many people who say that they themselves have just received an "invitation" email to a website called "Bluesky". He also received the email asking him to enter a code and install an app on his "smartphone".

The screenshot above shows the phishing email in question, which allegedly came from the BlueSky team (you can sign up to waiting lists there). But the request to download an app for iOS and then enter the invite code "bsky-social-xxxx" is an attempt to trick people into installing malware on their devices.

BlueSky invite codes always have two groups of letters, an already used invite from my pool looks like this: bsky-social-kafws-r3j47). And you should download the BlueSky app from the Apple or Google stores (iOS, Android). The post above also says that you should be vigilant with regard to your security and watch out for fake invitations – they are not genuine.

If you need an invite code …

You can leave a comment below with a valid e-mail and why you are interested below the post (for data protection reasons, however, only enter your e-mail address in the relevant field and do not post it in the comment text). I still have about ~40 invite codes for BlueSky to give away (and in the meantime the first invite codes are coming in from the readership). I'll work through the list of comments step by step and will send the invites via email. Then you can use a browser to register for BlueSky.

Everyone who has already commented on one of my BlueSky Invite posts here in the blog should have received a working invite code by email – I've given out about 200 invites so far. If someone is still open because I have overlooked it, please let me know by e-mail.

Unfortunately, it sometimes happens that a code turns out to be invalid (approx. 5-7% of codes). I therefore ask for feedback in every invite mail as to whether it worked. Those whose codes do not work will be added to the list of open requests. I then send a new invite in the next installment (I had a case where I needed three attempts).