Think foreign election meddling is just a game played by Russian spy agencies using state-funded troll farms? Think again. The privatized digital mercenary trade is exploding, and Scotland just found itself right in the crosshairs.
A major diplomatic row is kicking off after Viginum, France's national agency for detecting foreign digital interference, dropped a bombshell report. French authorities publicly accused a private Israeli cyber-intelligence and influence firm named BlackCore of running a highly coordinated, undercover campaign to disrupt the recent Scottish parliament elections. Their main target? Scottish First Minister John Swinney, the Scottish National Party (SNP), and the devolved government in Edinburgh.
This isn't about some teenagers playing pranks on social media. This is corporate-grade narrative warfare. Between January 6 and May 8, as Scotland prepared for a deeply contested Holyrood election, a network of digital mercenaries worked behind the scenes to pollute the local political discourse.
Inside the BlackCore Operation Against John Swinney
The technical data released by Viginum exposes exactly how these digital operations work. It wasn't a massive, blunt-force attack. Instead, it was a precise surgical strike designed to look like organic public anger.
Investigators identified a network of at least 256 coordinated proxy accounts on X (formerly Twitter). These weren't random accounts shouting into the void. They actively synchronized their movements to blast out roughly 1,400 hostile comments, heavily targeting specific political channels.
The breakdown of the operation shows exactly who the operatives wanted to silence:
- John Swinney's personal account took the heaviest beating with 652 targeted attacks.
- The main SNP account was hit 338 times.
- The official Scottish Government account was targeted 112 times.
The timing tells the real story. BlackCore synchronized its online mobs to hit right when election debates were heating up. The goal wasn't to hack voting machines; it was to manipulate the social media algorithms, hijack the comment sections, and alter public perception around the Scottish leadership.
The Motive Behind the Attack
Why would a private tech firm out of Israel care about a regional election in Scotland? Look at the foreign policy stance of the SNP and John Swinney.
Swinney and his government have been unusually aggressive in their criticism of the Israeli government's military actions in Gaza and the West Bank. Scotland didn't just issue strongly worded press releases. The devolved government went a step further, withholding state grants from arms manufacturers supplying the Israel Defense Forces (IDF) and freezing official support for exports to Israel.
BlackCore previously marketed itself as an "elite influence, cyber and technology company built for the modern era of information warfare." The firm openly bragged about using advanced tools to shape narratives for political campaigns and governments. When reporters from Reuters started sniffing around and asking questions about these election campaigns, BlackCore immediately scrubbed its entire website and went dark.
The plot thickens because the French authorities admit they don't know who actually funded the contract. Marc-Antoine Brillant, the chief of Viginum, stated that while the technical fingerprints lead directly to BlackCore's digital infrastructure, investigators couldn't identify the ultimate source of the cash. In the world of private dark PR, tracing the money through shell companies and encrypted payments is notoriously difficult.
A Global Pattern of Narrative Control
Scotland wasn't an isolated incident. The Viginum report proves that BlackCore was running a global playbook, selling its narrative-shaping tools to the highest bidder across multiple continents.
French intelligence initially caught on to BlackCore because the firm interfered heavily in France's municipal elections. Operatives targeted three mayoral candidates from the hard-left, pro-Palestine France Unbowed (LFI) party with aggressive online smear campaigns.
The digital mercenaries used the exact same setup to target the New York City mayoral election, which was won by progressive candidate Zohran Mamdani. Mamdani's anti-Zionist advocacy and criticism of Israeli policies made him a prime target for corporate narrative disruption. Similar digital interference campaigns linked to BlackCore have also been uncovered in Togo and Angola.
French Prime Minister Sébastien Lecornu has formally demanded explanations from the Israeli government, urging them to help track down who hired the firm. While the Israeli embassy in Paris issued a boilerplate statement denying any state intention to interfere in foreign elections, they have yet to address the activities of their domestic private contractors.
What This Means for Local Voters
If you think these bot networks don't affect your real-world opinions, you're underestimated the psychology of social media algorithms. Most people don't change their political views because a single bot replies to a tweet. That's not how modern information warfare operates.
Instead, firms like BlackCore use a tactic called "astroturfing." By flooding a comment section with hundreds of highly coordinated messages, they create the illusion of a massive, angry public consensus.
When regular voters scroll through an election thread and see hundreds of comments slamming John Swinney's foreign policy or mocking the SNP's economic plans, it triggers a cognitive bias. It makes unpopular opinions seem mainstream and forces actual users to second-guess their own views. It sours the digital town square, making organic political discussion almost impossible.
John Swinney, speaking from the United States where he's attending Scotland's World Cup football match against Haiti, didn't hold back. He called the findings deeply concerning and called out the UK government for failing to protect the democratic process. National security and cyber-defense fall under Westminster’s jurisdiction, and Swinney is demanding that the UK Cabinet Office treat private foreign digital interference as a top-tier security threat.
Spotting and Disarming Digital Interference
The harsh reality is that government cyber-agencies are always playing catch-up. Private influence firms evolve faster than the bureaucracies trying to stop them. If you want to keep your mind clear during a heated election cycle, you have to learn how to spot these coordinated campaigns yourself.
Keep an eye out for these classic red flags when reading political comment sections:
- The High-Volume Echo Chamber: If dozens of different accounts are using identical phrasing, specific catchphrases, or the exact same insults within a few minutes of each other, it's a coordinated script.
- The Empty Profiles: Click on the profiles driving the outrage. Bot and proxy accounts usually have generic or AI-generated profile pictures, zero personal information, very few followers, and a timeline that consists entirely of non-stop political retweets.
- The Sudden Pivot: Watch for accounts that normally post about random topics like cryptocurrency, gaming, or pop culture suddenly pivoting to post hyper-specific political attacks on Scottish trade policy or Middle Eastern diplomacy.
Don't feed the bots. Arguing with proxy accounts or quote-tweeting them to call them out only feeds the platform's engagement algorithms, pushing their misinformation higher up into the feeds of other voters. The most effective move is to report the coordinated behavior to the platform and move on. Scotland's democratic choices belong to Scottish voters, not to shadow corporate entities selling influence to the highest bidder.
