● Covered by 1 source · 4 reportsLow impact2 negative2 neutral
Bluesky Phishing Attack Compromises Over 4,500 Accounts; Singapore Police Warn of Android Malware Scam
Key points
- Bluesky phishing attack compromised 4,500+ accounts.
- Attack spread via fake government payment offers.
- Singapore Police reported Android malware scam losses of S$989,000.
- Scam involved social media ads and malicious APK downloads.
- FBI attributed Binance $6.43 billion crypto theft to North Korean group TraderTraitor.
- Binance crypto theft is the largest in history, surpassing Bybit's $1.46 billion in February 2025.
- Funds were stolen across 11 blockchains.
- UK's NCSC reported AI tools increased zero-day vulnerability discovery.
- Analysis of 383,000 CVEs showed critical systems take over a year to patch.
Bluesky Accounts Compromised by Phishing
Bluesky acknowledged a phishing attack that led to the compromise of more than 4,500 user accounts. The attack leveraged posts promoting a fraudulent offer of a government payment to trick users.
Bluesky has temporarily suspended the affected accounts and is working with their owners to restore access and secure them. Users whose accounts were suspended are advised to contact moderation@blueskyweb.xyz for assistance.
Android Malware Scam in Singapore
The Singapore Police Force issued an alert regarding a malware-enabled scam variant targeting users through social media advertisements. These ads promoted senior-focused activities, water-based fitness, and recycling initiatives.
Since April 2026, at least 62 cases have been reported, resulting in total losses of S$989,000. Victims were instructed to download an Android Application Package (APK) file for program registration. After installation, scammers impersonated government officials or bank representatives, claiming device or bank account compromises, and induced victims to transfer money, disclose credentials, or surrender valuables.
Updates
- UK's NCSC reported AI tools increased zero-day vulnerability discovery.
- Analysis of 383,000 CVEs showed critical systems take over a year to patch.
- FBI attributed Binance $6.43 billion crypto theft to North Korean group TraderTraitor.
- Binance crypto theft is the largest in history, surpassing Bybit's $1.46 billion in February 2025.
- Funds were stolen across 11 blockchains.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub laravel/framework GitHub Imahian/Notes GitHub signalapp/ringrtc CVE CVE-2026-6516210.0 CRITICAL CVE CVE-2026-1145099.2 CRITICAL CVE CVE-2026-1071868.6 HIGHHow outlets covered it
The UK's NCSC reports that AI tools have increased zero-day vulnerability discovery, while an analysis of 383,000 CVEs shows that critical systems like network appliances often take over a year to patch. This creates a wider window for attackers, despite defensive AI tools reducing the time from zero-day to n-day vulnerability.
The FBI has attributed the theft of over $6 billion in virtual assets from Binance to the North Korean hacking group TraderTraitor, marking it as the largest cryptocurrency theft in history. The stolen funds, primarily from Ethereum and Bitcoin, were taken across 11 blockchains, with $2.85 billion subsequently frozen by various crypto entities.
A new report, FortiBleed 2.0, identified 40,573 exposed secrets from FortiGate source files, indicating ongoing credential harvesting. Additionally, PHP2Shell vulnerabilities continue to see exploitation attempts, and threat actors are hijacking institutional DNS for illegal gambling content.
Bluesky reported a phishing attack that compromised over 4,500 user accounts through fake government payment promotions. Separately, the Singapore Police Force warned of an Android malware scam, resulting in S$989,000 in losses from 62 reported cases since April 2026.