Fake Government Payment Posts and Malicious Apps: Two Social Media Scams to Watch

The Hacker News ThreatsDay bulletin this week points to a run of lesser-noticed incidents alongside the bigger headlines. Two of them show how everyday social media can be used to trick people.

Bluesky has said it is aware of a phishing attack that compromised more than 4,500 accounts. The attack spread through posts promoting a fake offer of a government payment. Bluesky has temporarily suspended the affected accounts and is working with their owners to secure them and restore access. Users whose accounts were suspended can email the platform's moderation team for help.

Separately, the Singapore Police Force has warned about a malware-enabled scam variant. Fake social media ads, including on Facebook, promote senior-focused activities, water-based fitness programmes and recycling initiatives. Victims are told to download an Android application file to register or arrange a service. After installation, they receive unsolicited calls from scammers posing as government officials or bank representatives, who claim the victim's device or bank account is compromised, or that they are implicated in crimes. Victims are then pressured to transfer money, share banking credentials or personal details, or hand over valuables. Police report at least 62 cases since April 2026, with losses of S$989,000.

This summary covers only the opening of the bulletin, which lists many more stories.