Allied Intelligence — 2026-06-14

French Cyber Watchdog Viginum Exposes Israeli Firm BlackCore Operating Fake Palestinian Aid Charity

BLUFCriminal charges against BlackCore principals by year-end 2026 are unlikely, but France's explicit public attribution of Israeli commercial cyber firms to electoral interference resets EU defensive posture for 2027.

France's Viginum published a technical report on June 11 tracing a fake Palestinian aid organization, "Sadaqah Palestine," to servers and domains associated with Israeli firm BlackCore, with its social media content amplified by automated accounts that also targeted Scottish First Minister John Swinney 12. Viginum head Marc-Antoine Brillant, speaking at a press conference alongside France's prime minister, said BlackCore had previously run defamatory digital campaigns against LFI mayoral candidates in Marseille, Toulouse, and Roubaix during France's March local elections, including fake websites alleging sexual assault and fraudulent political advertisements placed during the mandatory electoral silence period 23. Brillant stated the same operational methods appear in operations targeting Angola, Togo, Scotland, and the 2025 New York mayoral race 24. Viginum identified BlackCore as part of a "vast ecosystem of Israeli cyber companies" linked to former Unit 8200 officer and Israeli cyber chief Yigal Unna, and Paris prosecutors have separately opened a criminal probe into the March interference 23.

Analysis
Viginum's public attribution marks the most explicit official triangulation of commercial Israeli cyber capacity to EU electoral interference yet on record, but formal criminal charges against BlackCore or its principals by year-end 2026 are unlikely. Jurisdictional barriers to reaching an extraterritorial Israeli firm, diplomatic cost against an already-strained French-Israeli relationship, and a compressed prosecutorial window jointly suppress charge probability. High confidence reflects documented precedent from analogous foreign-actor probes in France and the structural barriers already on record. The operation may alternatively represent commercially commissioned work by undisclosed private clients with no state direction, a distinction that limits France's diplomatic leverage regardless of charge outcome. Absent charges, public attribution remains the only enforcement lever and the 2027 presidential cycle faces the same scalable operational model without criminal deterrent.
5 sources
  1. Rapport technique Rokh-Solis - Viginum / SGDSN
  2. France says Israeli spy firm behind fake Palestinian aid charity - The New Arab
  3. 'Attack on our democracy': Inside an Israeli influence campaign in France's local elections - Middle East Eye
  4. Israeli firm BlackCore meddled in US and Scottish elections, French watchdog says - Middle East Eye
  5. The Fake Gaza Charity Linked to the Anti-left Disinformation Campaign in France - Haaretz

View in full brief →

UNCLASSIFIED // OPEN SOURCE