Forensic Research Archive of Manipulation and Exploitation
Illustration: an interwar radio-and-newsreel intelligence collage with a 1930s map of Europe and propaganda poster proofs.

Watch briefs · September 23, 2026

An Israel-based influence-for-hire shop used AI comment clusters it called Mother-Child so rented local brands would read as civic speech in France, the UK, Australia, and Africa.

Illustration, not an archive object

Filed
September 23, 2026, 17:00 UTC
Actor
Israel-based commercial influence-for-hire operators (Meta CIB attribution); IntelEye, Tel Aviv, as a named parallel
Target
Voters and comment-thread audiences in France, the United Kingdom, Australia, Togo, Gabon, Angola, Iran, and the United States, plus Israeli election talkers in the IntelEye parallel
Source
Impersonated Source falsified: fake personas, outlets or documents
Confidence
high Multiple independent open sources, low disagreement about the facts
Techniques
AstroturfingSynthetic mediaPlain folksManufactured consensusNarrative laundering
Where
France, United Kingdom, Australia, Togo, Gabon, Angola, Iran, United States
Channels
  • Facebook pages
  • Instagram
  • Tiktok
  • X twitter
  • Operator owned websites
  • Facebook groups
  • Ai comment clusters
  • Purchased social accounts
  • Deepseek open model

Summary

Meta's H2 2026 Adversarial Threat Report describes an Israel-origin Coordinated Inauthentic Behavior network run as commercial influence-for-hire for multiple clients. Operators stood up Pages and Instagram accounts posing as local civic brands, newsrooms, religious groups, and activists, then used automated accounts to mass-produce AI comments that boosted those assets. Meta removed 215 Facebook accounts, 4 Pages, and 1,044 Instagram accounts; about 32,500 Page follows and 248,000 Instagram follows had accumulated, with only about $100 in ad spend. Narratives were client-shaped: anti-immigrant copy into France, the UK, and Australia; partisan copy into Togo and Gabon; anti-government copy into Iran and Angola; a small bot cluster into New York City mayoral groups. Separately, 18 September 2026 New York Times reporting named Tel Aviv firm IntelEye as running DeepSeek agents on purchased accounts into Israel's October election talk; the firm says that work was a defensive test. Method, not roster, is the load-bearing fact: hired local costume plus AI volume.

Analysis

The mechanism is hired costume plus machine applause. Meta's H2 2026 write-up is the primary record for the larger net: Israel-origin operators built Pages and Instagram accounts that presented as local civic brands, news sources, religious organizations, and political activists in several countries at once. Those front assets were then warmed by clusters of lower-sophistication automated accounts whose job was to leave contextually relevant comments. Operators inside the network called the pattern Mother-Child. The child accounts were not the message; they were the crowd that made the mother look attended. Reach came from that fake conversation more than from ads. Meta logged about $100 in ad spend against 248,000 Instagram follows and 32,500 Page follows, which is the tell of engagement farming rather than a media buy.

Color is black on the fronts: the speaker is not the local parish, newsroom, or activist brand the audience sees. Color on the commercial wrapper is gray. Meta assesses an influence-for-hire shop serving distinct clients, which is why the copy is not one ideology. France, the UK, and Australia got anti-immigrant and anti-Muslim frames, including Islamization talk timed to French 2026 municipals. Togo and Gabon got partisan copy. Iran and Angola got anti-government copy. A small cluster posted into New York City mayoral Groups. A single political line would have been easier to read as a state campaign; a menu of lines sold to different buyers is the commercial signature.

That is propaganda under this atlas's working definition when the method is designed to bypass checking. Plain-folks identity is performed by the costume, not earned by the speaker. Manufactured consensus is the child-comment swarm. Narrative laundering is the passage of a client's line through a surface that looks indigenous. Synthetic media is the AI comment factory. Astroturf is the whole stack. None of those ids depends on whether the client is a party, a ministry, or a foreign desk. The same stack, run from Tehran or a PRC farm, would score the same way. Prior briefs already logged Iran-linked agents posing as Americans and PRC shops writing U.S. bill-shock copy; this cycle rotates to a commercial Israel-origin instance of the same architecture.

IntelEye is a named parallel, not a second confirmed client of the Meta net. The New York Times, reconstructed by Ynet, the Times of Israel, and the Jerusalem Post on 18-20 September 2026, reported that the Tel Aviv firm, founded by former NSO Group employees, bought about 10,000 social accounts, put DeepSeek agents on roughly 1,000 of them, and posted both for and against Benjamin Netanyahu ahead of Israel's October election. Co-founder Maor Sellek told the Times the firm does not operate influence campaigns and that the DeepSeek work was defensive research to see how under-safeguarded models could be misused. He also said, in those reconstructions, that platforms should have been told. Treat the intent claim as contested. Treat the admitted stack as documented: purchased accounts, an open Chinese model with safeguards off, agents choosing topics and leaving comments, no disclosure traveling with the posts. Research that looks identical to an undeclared persona farm is still the method, whatever the after-action label.

Tells a reader can use next time: a new local brand that appears in several countries with the same visual grammar; comment bursts that are on-topic but authorless; follow counts that dwarf ad spend; both-sides posting from the same infrastructure; an operator who describes detection research only after platforms and intelligence services have already treated the traffic as coordinated inauthentic behavior. Meta's own disruption language and the firm's on-record purchase numbers are stronger than any secondary pundit frame.

Literacy counter: do not score the country of the shop; score the costume. Ask who is speaking in their own name. If the account cannot be called, cannot disclose a client, and exists mainly to congratulate another account, it is infrastructure, not a neighbor. A watermark law that covers 5 percent of an image, as Israel's Central Elections Committee moved toward in September 2026, does not travel with a comment bot. Demand the mother account's operator and the child cluster's provenance before treating either as public opinion.

Tells

Evidence

  1. Meta H2 2026 Israel-origin CIB network summary and IOCs
  2. Meta H2 2026 Adversarial Threat Report landing page
  3. NYT investigation of autonomous AI influence campaigns including Israeli private firms
  4. Ynet reconstruction naming IntelEye, account buys, and Sellek quotes
  5. Times of Israel report on Israeli firms and DeepSeek agents
  6. Jerusalem Post account of IntelEye bots posting both for and against Netanyahu