The digital arena has emerged as a primary battleground in the ongoing hybrid warfare waged against the State of Israel by foreign adversaries. State-sponsored influence operations, specifically those orchestrated by the Islamic Republic of Iran and the Russian Federation, actively leverage coordinated inauthentic behavior to manipulate public discourse within Israel. By deploying sophisticated networks of automated bots, virtual personas, and artificial intelligence, these foreign actors systematically target Hebrew-language social media platforms to inflame societal divisions. These campaigns do not merely seek to spread false narratives, but are strategically designed to degrade national resilience, exploit existing socio-political friction, and weaken the collective trust of Israeli citizens in their democratic institutions.
The Evolution of Foreign Digital Subversion in Israel
Foreign interference in Israeli digital spaces has evolved from rudimentary, easily detectable spam campaigns into highly coordinated, linguistically fluent psychological operations. Historically, early Iranian digital operations were characterized by grammatical errors and crude graphic designs that failed to gain significant traction among authentic Hebrew speakers. However, following the outbreak of the regional conflict after October 7, 2023, adversaries dramatically accelerated their investment in advanced generative artificial intelligence and localized cultural targeting. This strategic shift has enabled foreign intelligence services to construct highly convincing Hebrew-language profiles that seamlessly integrate into local digital conversations, making detection exceptionally difficult for platform moderators and ordinary users alike.
Russia has simultaneously expanded its global "Doppelganger" disinformation campaign, which was originally launched in 2022 to target Ukraine and Western Europe, to aggressively target the Israeli public. Moscow’s cyber apparatus has specialized in duplicating prominent Israeli news portals to publish fabricated reports that mimic the editorial tone of legitimate domestic journalism. This hostile convergence of Iranian and Russian digital tactics demonstrates a shared strategic interest in exploiting Israel’s open democratic society to foster internal chaos and distract from regional geopolitical developments. Consequently, Hebrew-language discourse on platforms like X, Facebook, and Telegram has become heavily saturated with adversarial content designed to influence public perception during times of national crisis.
Key Facts of Coordinated Inauthentic Behavior
The execution of coordinated inauthentic behavior in Hebrew digital spaces relies on distinct methodologies developed by both Moscow and Tehran. These adversarial campaigns employ a diverse range of technological tools and psychological strategies to deceive Israeli social media users. The following points highlight the core tactical manifestations of these foreign cyber campaigns as documented by security intelligence researchers. These specific operational findings underscore the persistence and structural depth of the state-sponsored threat facing Israel's digital networks.
- The Doppelganger Campaign: Russian state-linked actors, including the Social Design Agency and Structura National Technologies, have systematically cloned major Israeli media outlets such as Walla and Liberal to disseminate fabricated articles designed to undermine Western alliances and foster domestic panic.
- The Emerald Divide Network: An extensive Iranian influence operation dubbed Emerald Divide created highly targeted fictitious organizations on Telegram and WhatsApp, such as "Jewish Fist" and "The Secular Israelis," to infiltrate extreme ideological factions and organize real-world political protests under false pretenses.
- Infiltration of Local Media: Iranian operators successfully masqueraded as civil rights groups and Arab-Jewish non-governmental organizations, convincing legitimate political figures and established Israeli-Arab media outlets to unwittingly republish foreign-generated propaganda.
In-Depth Technical and Tactical Analysis
A closer examination of these coordinated networks reveals a high degree of technical sophistication and tactical agility. According to detailed research published by the Institute for National Security Studies, Russian Doppelganger networks utilize automated clusters of accounts that post thousands of synthetic links in coordinated waves. These operations quickly pivot to exploit sensitive geopolitical events, such as international legal proceedings at The Hague or American military responses in the Red Sea, in order to convince Israelis that their nation is internationally isolated. This rapid adaptation of messaging relies on substantial state resources, utilizing advanced programming infrastructure to bypass automated platform defense systems and achieve maximum viral reach.
Iranian operations, by contrast, focus heavily on cognitive manipulation and psychological exploitation of domestic grief. Analysis from the Foundation for Defense of Democracies demonstrates how campaigns like Emerald Divide exploit highly emotional issues, such as the plight of Israeli hostages and military casualties, to turn citizens against the government. These networks have even utilized public Hebrew petition platforms and fake volunteer registration forms to harvest the personal data of unsuspecting Israelis, transforming online subversion into a direct threat to personal security. Furthermore, these networks utilize advanced artificial intelligence to generate unique variations of the same incendiary images and text, effectively preventing platform algorithms from applying standard spam filters.
To compound the threat, foreign actors frequently target minority populations and specific socioeconomic cohorts to maximize social friction. As highlighted in a report regarding Iranian operations targeting Israeli Arabs, Tehran has established fake local news outlets and joint Arab-Jewish cultural organizations to manipulate politically contentious topics. By posing as civil rights advocates, foreign operators successfully manipulated authentic domestic voices into amplifying divisive rhetoric, effectively laundering hostile propaganda through credible local channels. This multi-layered approach ensures that even if platform administrators dismantle the initial bot networks, the underlying polarization continues to propagate organically within the targeted communities.
Strategic Implications and the Israeli Response
The systematic infiltration of Hebrew discourse by Iranian and Russian bot networks poses a severe threat to Israel’s national security and social cohesion. By treating social media as a low-cost, high-yield theater of war, these foreign adversaries seek to erode the public's confidence in democratic processes and defensive operations. Mitigating this threat requires a multi-pronged national strategy that combines advanced technological monitoring, proactive public education, and rapid-response counter-disinformation mechanisms. Israel must actively collaborate with international cybersecurity firms and social media companies to preemptively flag, expose, and dismantle these coordinated networks before they can manipulate domestic debates.
Ultimately, the long-term defense against foreign cognitive warfare relies on fostering digital literacy and civic resilience among Israeli citizens. Recognizing that foreign operations rely on emotional triggers and societal divides, public awareness campaigns must equip Israelis with the tools to identify suspicious accounts, deepfakes, and cloned media outlets. By strengthening domestic media vigilance and maintaining an analytical, evidence-based approach to online information, Israeli society can successfully neutralize the hostile influence of foreign disinformation. Protecting the integrity of Hebrew digital discourse is not merely a technical challenge for cybersecurity experts, but a vital component of defending Israel's democratic resilience in the modern digital age.