BlackCore’s Influence Operations for Hire
BlackCore is an Israeli influence-for-hire company conducting coordinated digital manipulation campaigns across multiple countries. Their operations include creating fake social media personas, deploying AI-generated profile pictures, and running coordinated amplification on platforms like Facebook, Instagram, and TikTok. A notable campaign involved a 14-week training program for Angolan government employees in early 2026. BlackCore openly advertises these deceptive influence services to government clients, enabling state actors to manipulate online discourse.
AI Analysis
Technical Summary
BlackCore operates a sophisticated influence-for-hire infrastructure that offers services such as discourse dominance, organic engagement manipulation, and counter-operations. Researchers documented a campaign where Angolan government employees were trained over 14 weeks to create and deploy fake social media personas and coordinated inauthentic behavior. The operation leveraged AI-generated profile images and fake news outlets, including 'Agita News', to amplify messaging across major social media platforms. BlackCore's promotional materials reveal their capability to conduct deceptive influence operations for government clients, illustrating the commercialization and accessibility of such services to state actors.
Potential Impact
The campaign enables state and government actors to manipulate public opinion and online discourse through deceptive means, including fake personas and coordinated inauthentic amplification. This can undermine trust in social media platforms and distort information environments in affected countries. The influence operations may affect political, social, and informational stability in targeted regions.
Mitigation Recommendations
No official patch or fix applies as this is an influence operation campaign rather than a software vulnerability. Defenders should focus on detection and disruption of coordinated inauthentic behavior, monitoring for AI-generated content and fake personas, and raising awareness about influence-for-hire tactics. Social media platforms should enforce policies against coordinated manipulation and fake accounts. There is no vendor advisory or official remediation for this threat.
Affected Countries
United States, Angola, Australia, France, Gabon, Togo
Indicators of Compromise
- domain: agitanews.net
- domain: blackcore.online
- domain: angola-plan.blackcore.online
- domain: api.blackcore.online
- domain: auth.blackcore.online
- domain: ava.blackcore.online
- domain: demo.blackcore.online
- domain: en.blackcore.online
- domain: full-report.blackcore.online
- domain: landing.blackcore.online
- domain: photos.blackcore.online
- domain: proposals.blackcore.online
BlackCore’s Influence Operations for Hire
Description
BlackCore is an Israeli influence-for-hire company conducting coordinated digital manipulation campaigns across multiple countries. Their operations include creating fake social media personas, deploying AI-generated profile pictures, and running coordinated amplification on platforms like Facebook, Instagram, and TikTok. A notable campaign involved a 14-week training program for Angolan government employees in early 2026. BlackCore openly advertises these deceptive influence services to government clients, enabling state actors to manipulate online discourse.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
BlackCore operates a sophisticated influence-for-hire infrastructure that offers services such as discourse dominance, organic engagement manipulation, and counter-operations. Researchers documented a campaign where Angolan government employees were trained over 14 weeks to create and deploy fake social media personas and coordinated inauthentic behavior. The operation leveraged AI-generated profile images and fake news outlets, including 'Agita News', to amplify messaging across major social media platforms. BlackCore's promotional materials reveal their capability to conduct deceptive influence operations for government clients, illustrating the commercialization and accessibility of such services to state actors.
Potential Impact
The campaign enables state and government actors to manipulate public opinion and online discourse through deceptive means, including fake personas and coordinated inauthentic amplification. This can undermine trust in social media platforms and distort information environments in affected countries. The influence operations may affect political, social, and informational stability in targeted regions.
Defensive Guidance
No official patch or fix applies as this is an influence operation campaign rather than a software vulnerability. Defenders should focus on detection and disruption of coordinated inauthentic behavior, monitoring for AI-generated content and fake personas, and raising awareness about influence-for-hire tactics. Social media platforms should enforce policies against coordinated manipulation and fake accounts. There is no vendor advisory or official remediation for this threat.
Technical Details
- Author
- AlienVault
- Tlp
- white
- References
- ["https://citizenlab.ca/research/blackcores-influence-operations-for-hire/"]
- Adversary
- BlackCore
- Pulse Id
- 6aac55695dba12834e959f52
Indicators of Compromise
Domain
| Value | Description | Copy |
|---|---|---|
domainagitanews.net | — | |
domainblackcore.online | — | |
domainangola-plan.blackcore.online | — | |
domainapi.blackcore.online | — | |
domainauth.blackcore.online | — | |
domainava.blackcore.online | — | |
domaindemo.blackcore.online | — | |
domainen.blackcore.online | — | |
domainfull-report.blackcore.online | — | |
domainlanding.blackcore.online | — | |
domainphotos.blackcore.online | — | |
domainproposals.blackcore.online | — |
Threat ID: 6aacfdfa55bf5e2cf5c89962
Added to database: 09/18/2026, 09:01:46 UTC
Last enriched: 09/18/2026, 09:16:29 UTC
Last updated: 09/18/2026, 10:24:45 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.