HN Debrief

Israeli firm BlackCore suspected of meddling in New York and Scotland votes

  • Politics
  • Security
  • Elections
  • Israel
  • Social Media

Reuters says French authorities suspect BlackCore, an Israeli firm linked to disinformation operations, also meddled in elections in New York City and Scotland through fake social accounts and smear messaging. The article itself is thin on operational detail, which pushed people to fill in the likely model from adjacent cases: a private shop selling political influence as a service, possibly for local clients, possibly for state-aligned interests, and hard to untangle because the contractor is several layers removed from whoever paid. A lot of the reaction was not surprise but recognition. People connected this to the broader Israeli market for spyware, opposition research, and influence tooling, with Pegasus and Black Cube coming up repeatedly as examples of the same ecosystem rather than proof about BlackCore specifically. The sharper point was that this is no longer just about hacking phones or stealing documents. It is cheap, scalable narrative warfare built from fake personas, social platforms, and now LLM-assisted content. That makes it accessible to small governments, parties, and private actors, not just major intelligence services. The strongest pushback was against treating Israel as uniquely responsible for the existence of this business. Several commenters argued that offensive cyber firms and covert influence contractors exist in many countries, including the US, and that the Reuters piece still does not establish who commissioned these operations. Even so, the center of gravity landed on two conclusions: first, private influence contractors have become a durable part of modern politics, and second, democracies still have no credible answer when the manipulation is cheap, outsourced, and deniable.

Treat election influence as an export industry, not just a state intelligence function. If your company, portfolio, or public figures depend on online narrative integrity, assume cheap contractor-run manipulation is now a routine risk and plan monitoring and response accordingly.

Discussion mood

Angry and unsurprised. Most comments treated the allegations as plausible and as part of a broader Israeli surveillance and influence ecosystem, while frustration centered on how deniable, under-regulated, and politically protected this kind of meddling remains.

Key insights

  1. 01

    Cheap influence tooling changes the threat model

    The key shift is not one more dirty-tricks firm. It is that coordinated influence is now cheap enough for small states, parties, and even well-funded individuals to buy off the shelf. One commenter with firsthand exposure to low-cost social account markets argued that a few thousand euros and a competent team can sustain convincing campaigns for long periods, and that LLMs make the whole thing more scalable. That reframes election meddling from a rare intelligence operation into a routine commercial capability.

    If you defend a campaign, brand, or public institution, model coordinated fake-persona attacks as something ordinary adversaries can afford. Build monitoring and rapid rebuttal processes for synthetic grassroots activity, not just high-end intrusions.

      Attribution:
    • endofreach #1
  2. 02

    Influence works through patient local pipelines

    The more durable play is not viral propaganda. It is systematic relationship building around future decision makers. One commenter described a ground game where politically useful people are identified early, contacted at local levels, cultivated over time, and pulled into travel and donor networks. That matters because it blurs the line between normal advocacy and foreign-aligned influence, especially when the operation is legally domestic but strategically coordinated.

    Watch local politics and mid-career officials, not just national figures. Influence networks often start years before a target has real power, which means due diligence should include donor, travel, and relationship patterns well below the federal level.

      Attribution:
    • Spooky23 #1
  3. 03

    Antisemitism is the wrong analytic frame

    Using the old racial category behind the word "antisemitism" to argue that criticism of Israeli state conduct should be off limits just muddies the issue. The useful distinction is between hatred of Jews and criticism of a government, lobby, or contractor network. That clarification matters here because accusations of prejudice can short-circuit scrutiny of real influence operations, while genuinely antisemitic comments make the scrutiny easier to dismiss.

    Be precise in your own language when criticizing state or lobbying behavior. Separating ethnic hatred from institutional criticism makes claims easier to defend and harder to wave away.

      Attribution:
    • woodruffw #1
  4. 04

    Astroturf can diverge sharply from street reality

    A New York commenter said the online push painting Mamdani as antisemitic felt hysterical and far more intense than anything visible offline. That is a useful signal about how influence campaigns show up in practice. Their job is not to persuade everyone. It is to flood the channels journalists, activists, and highly online voters use to judge what the public supposedly thinks.

    Do not read online intensity as a clean proxy for real-world salience. Pair social monitoring with offline reporting before you conclude a narrative has genuine mass support.

      Attribution:
    • afavour #1

Against the grain

  1. 01

    Israel is not the only market for this

    Claims that Israel is the global headquarters of spyware and covert influence got a hard check from people pointing out that commercial CNE tooling and adjacent dirty-work firms exist all over the world, including in the US. That does not clear BlackCore. It does change the frame from a uniquely Israeli pathology to a wider international market that happens to have visible Israeli players.

    Do not build policy or risk models around one country alone. Vendor ecosystems for offensive cyber and influence operations are global, so supplier mapping should be broad rather than headline driven.

      Attribution:
    • tptacek #1 #2
  2. 02

    Local clients may matter more than Israel

    One Israeli commenter argued the most plausible buyer is often a local political actor who wants deniable online muscle, not necessarily the Israeli state pursuing municipal elections abroad. That shifts attention from nationality of the contractor to the demand side of the business. If campaigns and parties are willing to buy this service, banning foreign firms alone will not solve much.

    When these cases surface, investigate who benefits locally and who had motive to pay. Compliance and enforcement should target purchasers and intermediaries, not just the foreign contractor in the headline.

      Attribution:
    • breppp #1 #2
  3. 03

    Foreign and domestic persuasion are not equivalent

    A skeptical comment asked whether foreign-funded TikTok persuasion is really worse than the same manipulation funded locally. The reply cut to the core democratic rule. Elections restrict formal participation to members of the polity, so treating outside spending as no different from inside advocacy collapses the same boundary elections are built to enforce.

    Keep a bright line between domestic campaigning and foreign intervention when designing policy. If the distinction gets blurred, enforcement against covert foreign spending becomes much harder to justify.

      Attribution:
    • soerxpso #1
    • muwtyhg #1

In plain english

Black Cube
An Israeli private intelligence and opposition research firm that has been accused in past political and legal dirty-tricks operations.
CNE
Computer Network Exploitation, a term for hacking into computer systems or networks to gather intelligence or gain access.
LLM
Large Language Model, an AI system trained to generate and analyze text.
Pegasus
A spyware product made by NSO Group that can secretly compromise phones and extract data or monitor users.

Reference links

Reporting on BlackCore and related allegations

Related firms and spyware ecosystem

Books, videos, and historical context

Lobbying and political influence references