Stop: BlueSky fake invites dropping malware

Sicherheit (Pexels, allgemeine Nutzung)[German]Since Elon Musk took over Twitter and renamed it X, the social network BlueSky, created by Twitter co-founder Jack Dorsey, has experienced a boom. Access is currently only possible via invite code – i.e. recommendations from people who are represented on BlueSky. I have now come across a warning that there are mails on the way that pretend to be an invitation to BlueSky, but are ultimately intended to be used to spread malware (Trojans) or for phishing. If you need a BlueSky Invite, you can get it here on for free and without risk. I currently have free codes available again.


BlueSky in a nutshell

BlueSky is a short messaging service with a user interface like the former Twitter, which was created and developed by former Twitter founder Jack Dorsey and Jay Grader. BlueSky is accessible via a web browser (see image below).


To do this, simply enter the URL in the browser (I have always done this as a matter of habit. There is also a native BlueSky mobile app (iOS, Android) for access on mobile devices. However, not everything is displayed in the app. And there is the open source app Graysky, which offers more functions but does not display all the information.

BlueSky is currently still very much under development and in beta mode. Participation is only possible by invitation from BlueSky members via an invite code. This is intended to prevent excessive growth – despite this, the service has more than 1.3 million members. Every volte face on Twitter drives its users to BlueSky (provided they can get hold of an invite code).

Phishing and malware on it's way

This "invite-only" thing naturally arouses desires "why am I not in yet, I need access", and on the other hand of course calls cyber criminals onto the scene. Invite codes are being sold on the Internet (going up to ~10 US dollars) and phishing/malware campaigns are probably underway. I saw the following post on BlueSky a day ago.


The author of the post has posted a phishing/malware warning. He hears from many people who say that they themselves have just received an "invitation" email to a website called "Bluesky". He also received the email asking him to enter a code and install an app on his "smartphone".

The screenshot above shows the phishing email in question, which allegedly came from the BlueSky team (you can sign up to waiting lists there). But the request to download an app for iOS and then enter the invite code "bsky-social-xxxx" is an attempt to trick people into installing malware on their devices.

BlueSky invite codes always have two groups of letters, an already used invite from my pool looks like this: bsky-social-kafws-r3j47). And you should download the BlueSky app from the Apple or Google stores (iOS, Android). The post above also says that you should be vigilant with regard to your security and watch out for fake invitations – they are not genuine.

If you need an invite code …

You can leave a comment below with a valid e-mail and why you are interested below the post (for data protection reasons, however, only enter your e-mail address in the relevant field and do not post it in the comment text). I still have about ~40 invite codes for BlueSky to give away (and in the meantime the first invite codes are coming in from the readership). I'll work through the list of comments step by step and will send the invites via email. Then you can use a browser to register for BlueSky.

Everyone who has already commented on one of my BlueSky Invite posts here in the blog should have received a working invite code by email – I've given out about 200 invites so far. If someone is still open because I have overlooked it, please let me know by e-mail.

Unfortunately, it sometimes happens that a code turns out to be invalid (approx. 5-7% of codes). I therefore ask for feedback in every invite mail as to whether it worked. Those whose codes do not work will be added to the list of open requests. I then send a new invite in the next installment (I had a case where I needed three attempts).

Cookies helps to fund this blog: Cookie settings

This entry was posted in Security and tagged . Bookmark the permalink.

6 Responses to Stop: BlueSky fake invites dropping malware

  1. Carlos says:

    Hi, I would like an invite code. Most of the artist I follow are starting to migrate and I would really like to continue doing so.

  2. Michael says:

    Likewise, I'd like an invite if you can find one behind the couch cushions… The old legacy system is such a cesspool, I'd like to get access to something that is not yet so toxic to read on a daily basis.

  3. Gabe says:

    Many people who I follow on twitter are moving to bluesky and I've been on the wait list for months and I'd love to be able to get in sooner.
    Thank You!

  4. Advertising

  5. Frank says:

    Hi, if there is an invite left I would be happy to receive it! X is becoming a cesspool more and more, people I follow are leaving or have already left. I would like to follow. Thanks in advance!

  6. Fabian says:

    Hi there, Invitation code is very appreciated.

    Danke fur these article

Comments are closed.