Black Cube’s shadow wars expose the dangers of privatized intelligence

Israeli private intelligence firm Black Cube has emerged as one of the most controversial actors in the global shadow intelligence industry, accused of deploying undercover operatives, fake identities, covert recordings and influence operations across political campaigns, corporate disputes and sensitive legal battles.

Founded in 2010 by former Israeli intelligence officers Dan Zorella and Avi Yanus, Black Cube presents itself as a litigation support and business intelligence company. But investigations, court cases and media reports over the past decade have repeatedly linked the firm to covert influence campaigns, surveillance operations and politically sensitive interventions stretching from Europe to North America.

Black Cube Tel Aviv office / headquarters building

The company operates in a rapidly expanding private intelligence sector where former state operatives increasingly work through commercial firms serving governments, corporations and wealthy clients.

Critics say the distinction between state intelligence capabilities and private commercial espionage is becoming increasingly blurred.

Over recent years, Black Cube has been tied to hidden-camera stings that triggered political crises, election-related influence allegations, activist targeting campaigns, corporate smear operations and surveillance efforts aimed at journalists and researchers.

Technology companies have responded.

Meta designated Black Cube a “cyber mercenary” operation in 2021 and dismantled accounts linked to the company, accusing it of surveillance-for-hire activities targeting individuals across multiple countries, including activists in Africa and Palestinian organizers. LinkedIn later removed networks of accounts linked to operations using fabricated identities and deceptive outreach tactics.

Yet despite repeated exposure, legal consequences have remained rare.

Romanian courts handed suspended sentences to company founders in a case involving attempts to access information linked to former anti-corruption prosecutor Laura Codruța Kövesi — one of the few instances where Black Cube-linked activities resulted in judicial action.

Cyprus “Videogate” and synthetic personas

Black Cube returned to international headlines in Cyprus after acknowledging involvement in the so-called “Videogate” scandal, where secretly recorded footage triggered political upheaval and resignations in Nicosia.

The operation revolved around videos released through an online figure calling herself “Emily Thompson,” presented publicly as a content creator and investor.

European digital researchers later raised concerns that the persona itself may have been artificially constructed, fueling fears over the use of synthetic identities in political influence operations.

Black Cube later confirmed involvement in the operation, defending it as an anti-corruption effort and stating it was “proud” of exposing wrongdoing while refusing to identify the client behind the campaign.

The case reflected tactics repeatedly associated with the firm: undercover meetings, covert recordings, false identities and carefully timed information releases designed for maximum political impact.

Election influence concerns in Europe

Similar allegations surfaced in Slovenia ahead of national elections.

Slovenian Prime Minister Robert Golob accused foreign actors of attempting to influence the country’s political environment after recordings targeting figures linked to his government appeared publicly.

Slovenia’s intelligence agency SOVA later confirmed Black Cube personnel had entered the country during the election period. Golob reportedly characterized the affair as an attack on national sovereignty and raised the issue with European officials.

Reports by Drop Site News further claimed Black Cube representatives met opposition figures before damaging recordings surfaced, intensifying concerns over private intelligence firms entering electoral politics.

The allegations echoed earlier operations uncovered in Hungary.

Reuters and LinkedIn investigations found operatives linked to Black Cube used fake online identities, fabricated recruitment offers and false business opportunities to approach activists, journalists and NGO figures ahead of Hungarian elections. LinkedIn later dismantled the network.

Corporate wars and Hollywood scandals

Black Cube’s reach extended beyond politics.

The firm became internationally known after disgraced Hollywood producer Harvey Weinstein reportedly hired the company during efforts to counter sexual abuse allegations against him.

Black Cube came under international scrutiny after operations linked to Harvey Weinstein investigations

Investigations later found operatives allegedly posed as activists and business figures to approach journalists and accusers involved in the case. Reporting by major outlets eventually exposed the operation, prompting rare public apologies linked to Black Cube representatives.

The company also appeared in a major corporate intelligence controversy involving gambling technology firms.

Court proceedings later revealed that Playtech allegedly paid approximately £1.8 million for intelligence work targeting rival Evolution Gaming. Regulators subsequently criticized the resulting report as baseless, exposing how private intelligence capabilities increasingly intersect with boardroom warfare.

Watchers investigating the watchers

Black Cube’s activities have also intersected with the wider Israeli surveillance ecosystem.

Researchers at Citizen Lab — the group known globally for helping expose the Pegasus spyware scandal — reported attempts by individuals allegedly linked to Black Cube to gather information on their work.

Researcher John Scott-Railton said he was approached by an operative using a false identity seeking information on Citizen Lab’s Pegasus investigations.

Poland provided another warning sign of how Israeli spyware and private intelligence networks can intersect with democratic politics. Citizen Lab researchers John Scott-Railton and Bill Marczak testified before a Polish Senate commission in January 2022 after confirming that Pegasus spyware, made by Israel’s NSO Group, had been used to hack Polish government critics. The case shocked Poland because it suggested that surveillance tools marketed for national security were being turned inward against political opponents and civil society figures. For Scott-Railton, the Polish case formed part of a wider global pattern: an expanding ecosystem of mercenary surveillance players, private intelligence firms and political clients operating across borders with limited oversight and few consequences.

The episode raised concerns that private intelligence firms were not only collecting information for clients but monitoring researchers and watchdogs investigating surveillance networks themselves.

The overlap between private intelligence firms, spyware developers and former intelligence networks has increasingly drawn scrutiny.

Many companies operating in Israel’s cyber and surveillance sector trace roots to Unit 8200, Israel’s elite signals intelligence division, whose alumni have gone on to establish cybersecurity, surveillance and intelligence businesses.

For critics, the line between state tradecraft and private commercial operations is becoming increasingly difficult to distinguish.

Turkey allegations remain unverified

Allegations circulating in Turkey have also raised questions over whether Black Cube-style methods — including covert recordings, sting operations and digital influence tactics — may have been replicated in domestic political disputes.

However, no public evidence has verified such claims and they remain unproven.

For observers, the issue now extends far beyond a single company.

The rise of private intelligence firms capable of conducting surveillance, influence campaigns, covert recordings and information operations across borders has created a new arena where elections, legal disputes and political conflicts increasingly intersect with commercial espionage networks operating outside traditional oversight mechanisms.

Notorious Incidents (2021–2026)

The table below compares recent high-profile cases involving Black Cube operatives or reports of its work, as documented in news and court filings:

DateLocationTarget / ClientAlleged TacticOutcome / Legal StatusSources
Nov 2020UKIsraeli TV programme “Uvda”Libel lawsuit by Black Cube against journalistsBlack Cube withdrew suit; ordered to pay £350k costsTimes of Israel
Mar 2022RomaniaAnti-corruption prosecutorCovert hack/email breach attemptFounders Yanus & Zorella plead guilty, get suspended sentencesTimes of Israel
Apr 2022HungaryOpposition activists/journalistsLinkedIn ruse: fake job offers, video callsLinkedIn removed all fake profiles; Black Cube disavowed cyber actsAtlatszo, Reuters
Dec 2025SloveniaOpposition leader Janez Janša (alleged)Covert meeting with operativesGovernment accused “foreign meddling”; intel agency confirmed visitReuters
Apr 2026CyprusPresidential administrationSting video of officials discussing kickbacksSenior aide resigned; official probe (ongoing)Reuters
Oct 2025Online (NG)Online gaming rival (Evolution)Commissioned smear report by PlaytechRegulators found report baseless; legal battle unmasked clientNEXT.io
Aug 2024Israel/USAUS student activistsProposal to investigate Students for Justice in PalestineOperation never executed; Black Cube says it “never planned” such probeTimes of Israel

The above highlights Black Cube’s pattern of shadowy influence: from boardrooms to ballots. For example, the 2021–25 legal fight in New Jersey revealed that Playtech secretly paid £1.8 million to Black Cube to produce a defamatory dossier on rival Evolution Gaming. Regulators and courts later deemed that report “objectively baseless” and harmful.

Yet even when these operations come to light, Black Cube’s clients often remain hidden or unpunished. Meta’s actions – banning ~300 of its accounts for “indiscriminate” surveillance – are among the few public consequences.

Scroll to Top