Gutiérrez, a political-science major, was a leader of the Young Democrats Club at the College of the Sequoias, and during the 2016 Presidential campaign he attended a rally for Bernie Sanders. Gutiérrez grew up watching his father, a dairyman, work twelve-hour shifts, six days a week, and Sanders’s message about corporate greed, income inequality, and the ills of America’s for-profit health-care system resonated with him. Seeing Benzeevi and Kumar enjoying themselves at La Piazza inflamed Gutiérrez’s sense of injustice. He spent the week between Christmas and New Year’s knocking on doors and asking neighbors to sign a petition for a recall vote, which ultimately garnered more than eleven hundred signatures. Gutiérrez later asked his mother, Senovia, if she would run for Kumar’s seat; the citizens’ group thought that Senovia, an immigrant and a social worker, would be an appealing candidate in a community that is around sixty per cent Hispanic.
The recall was a clear threat to Benzeevi’s hospital-management business, and he consulted a law firm in Washington, D.C., about mounting a campaign to save Kumar’s seat. An adviser there referred him to Psy-Group, an Israeli private intelligence company. Psy-Group’s slogan was “Shape Reality,” and its techniques included the use of elaborate false identities to manipulate its targets. Psy-Group was part of a new wave of private intelligence firms that recruited from the ranks of Israel’s secret services—self-described “private Mossads.” The most aggressive of these firms seemed willing to do just about anything for their clients.
Psy-Group stood out from many of its rivals because it didn’t just gather intelligence; it specialized in covertly spreading messages to influence what people believed and how they behaved. Its operatives took advantage of technological innovations and lax governmental oversight. “Social media allows you to reach virtually anyone and to play with their minds,” Uzi Shaya, a former senior Israeli intelligence officer, said. “You can do whatever you want. You can be whoever you want. It’s a place where wars are fought, elections are won, and terror is promoted. There are no regulations. It is a no man’s land.”
In recent years, Psy-Group has conceived of a variety of elaborate covert operations. In Amsterdam, the firm prepared a report on a religious sect called the Brunstad Christian Church, whose Norwegian leader, Psy-Group noted, claimed to have written “a more important book than the New Testament.” In Gabon, Psy-Group pitched “Operation Bentley”—an effort to “preserve” President Ali Bongo Ondimba’s hold on power by collecting and disseminating intelligence about his main political rival. (It’s unclear whether or not the operations in Amsterdam and Gabon were carried out. A spokesperson for Brunstad said that it was “plainly ridiculous” that the church considered “any book” to be more important than the Bible. Ondimba’s representatives could not be reached for comment.) In another project, targeting the South African billionaire heirs of an apartheid-era skin-lightening company, Psy-Group secretly recorded family members of the heirs describing them as greedy and, in one case, as a “piece of shit.” In New York, Psy-Group mounted a campaign on behalf of wealthy Jewish-American donors to embarrass and intimidate activists on American college campuses who support a movement to put economic pressure on Israel because of its treatment of the Palestinians.
Psy-Group’s larger ambition was to break into the U.S. election market. During the 2016 Presidential race, the company pitched members of Donald Trump’s campaign team on its ability to influence the results. Psy-Group’s owner, Joel Zamel, even asked Newt Gingrich, the former House Speaker, to offer Zamel’s services to Jared Kushner, Trump’s son-in-law. The effort to drum up business included brash claims about the company’s skills in online deception. The posturing was intended to attract clients—but it also attracted the attention of the F.B.I. Robert Mueller, the special counsel, has been examining the firm’s activities as part of his investigation into Russian election interference and other matters.
Psy-Group’s talks with Benzeevi, after the 2016 election, spurred the company to draw up a plan for developing more business at the state and local levels. No election was too small. One company document reported that Psy-Group’s influence services cost, on average, just three hundred and fifty thousand dollars—as little as two hundred and seventy-five dollars an hour. The new strategy called for pitching more than fifty individuals and groups, including the Republican National Committee, the Democratic National Committee, and major super pacs. The firm published a provocative brochure featuring an image of a goldfish with a shark fin tied to its back, below the tagline “Reality is a matter of perception.” Another brochure showed a cat that cast a lion’s shadow and listed “honey traps” among the firm’s services. (In the espionage world, a honey trap often involves deploying a sexually attractive operative to induce a target to provide information.)
Psy-Group put together a proposal for Benzeevi, promising “a coordinated intelligence operation and influence campaign” in Tulare to preserve Kumar’s seat on the hospital board. Operatives would use fake identities to “uncover and deliver actionable intelligence” on members of the community who appeared to be leading the recall effort, and would use unattributed Web sites to mount a “negative campaign” targeting “the opposition candidate.” All these activities, the proposal assured, would appear to be part of a “grass roots” movement in Tulare. The operation was code-named Project Mockingjay, a reference to a fictional bird in the “Hunger Games” novels, known for its ability to mimic human sounds.
The modern market for private intelligence dates back to the nineteen-seventies, when a former prosecutor named
Jules Kroll began hiring police detectives, F.B.I. and Treasury agents, and forensic accountants to conduct detective work on behalf of corporations, law and accounting firms, and other clients. The company, which became known as Kroll, Inc., also recruited a small number of former C.I.A. officers, but rarely advertised these hires—Kroll knew that associating too closely with the C.I.A. could endanger employees in countries where the spy agency was viewed with contempt.
In the two-thousands, Israeli versions of Kroll entered the market. These companies had a unique advantage: few countries produce more highly trained and war-tested intelligence professionals, as a proportion of the population, than Israel. Conscription in Israel is mandatory for most citizens, and top intelligence units often identify talented recruits while they are in high school. These soldiers undergo intensive training in a range of language and technical skills. After a few years of government service, most are discharged, at which point many finish their educations and enter the civilian job market. Gadi Aviran was one of the pioneers of the private Israeli intelligence industry. “There was this huge pipeline of talent coming out of the military every year,” Aviran, who founded the intelligence firm Terrogence, said. “All a company like mine had to do was stand at the gate and say, ‘You look interesting.’ ”
Aviran was formerly the head of an Israeli military intelligence research team, where he supervised analysts who, looking for terrorist threats, reviewed data vacuumed up from telephone communications and from the Internet. The process, Aviran said, was like “looking at a flowing river and trying to see if there was anything interesting passing by.” The system was generally effective at analyzing attacks after they occurred, but wasn’t as good at providing advance warning.
Aviran began to think about a more targeted approach. Spies, private investigators, criminals, and even some journalists have long used false identities to trick people into providing information, a practice known as pretexting. The Internet made pretexting easier. Aviran thought that fake online personae, known as avatars, could be used to spy on terrorist groups and to head off planned attacks. In 2004, he started Terrogence, which became the first major Israeli company to demonstrate the effectiveness of avatars in counterterrorism work.
When Terrogence launched, many suspected jihadi groups communicated through members-only online forums run by designated administrators. To get past these gatekeepers, Terrogence’s operatives gave their avatars legends, or backstories—often as Arab students at European universities. As the avatars proliferated, their operators joked that the most valuable online chat rooms were now entirely populated by avatars, who were, inadvertently, collecting information from one another.
Aviran tried to keep Terrogence focussed on its core mission—counterterrorism—but some government clients offered the company substantial contracts to move in other directions. “It’s a slippery slope,” Aviran said, insisting that it was a path he resisted. “You start with one thing and suddenly you think, Wait, wait, I can do this. Then somebody asks if you can do something else. And you say, ‘Well, it’s risky but the money is good, so let’s give it a try.’ ”
Terrogence’s success spawned imitators, and other former intelligence officers began to open their own firms, many of them less risk-averse than Terrogence. One of the boldest, Black Cube, openly advertised its ties to Israeli spy agencies, including Mossad and Unit 8200, the military’s signals-intelligence corps. Black Cube got its start with the help of Vincent Tchenguiz, an Iranian-born English real-estate tycoon who had invested in Terrogence. In March, 2011, Tchenguiz was arrested by a British anti-fraud unit investigating his business dealings. (The office later dropped the investigation and paid him a settlement.)
He asked
Meir Dagan, who had just stepped down as the director of Mossad, how he could draw on the expertise of former intelligence officers to look into the business rivals he believed had alerted authorities. Dagan’s message to Tchenguiz, a former colleague of Dagan’s said, was: I can find a personal Mossad for you. (Dagan died in 2016.) Tchenguiz became Black Cube’s first significant client.
In some respects, Psy-Group emerged more directly from Terrogence. In 2008, Aviran hired an Israel Defense Forces intelligence officer named Royi Burstien to be the vice-president of business development. Social networks such as Facebook—whose profiles featured photographs and other personal information—were becoming popular, and Terrogence’s avatars had become more sophisticated to avoid detection. Burstien urged Aviran to consider using the avatars in more aggressive ways, and on behalf of a wider range of commercial clients. Aviran was wary. After less than a year at Terrogence, Burstien returned to Israel’s military intelligence, and joined an élite unit that specialized in PsyOps, or psychological operations.
In the following years, some of Burstien’s ambitions were being fulfilled elsewhere. Russia’s intelligence services had begun using a variety of tools—including hacking, cyber weapons, online aliases, and Web sites that spread fake news—to conduct
information warfare and to sow discord in neighboring countries. In the late two-thousands, the Russians targeted Estonia and Georgia. In 2014, they hit Ukraine. Later that year, Burstien founded Psy-Group, which, like Black Cube, used avatars to conduct intelligence-collection operations. But Burstien also offered his avatars for another purpose: influence campaigns, similar to those mounted by Russia. Burstien boasted that Psy-Group’s so-called “deep” avatars were so convincing that they were capable of planting the seeds of ideas in people’s heads.
Tulare seemed an unlikely target for an influence campaign. The town took its name from a lake that, in 1773, was christened by a Spanish commandant as Los Tules, for the tule reeds that grew along the shore. The town was later memorialized in a song, “Ghost of Bardsley Road,” about a headless spectre who rode a white Honda motorcycle.
Today, the city is home to just over sixty thousand people. The county leads the nation in dairy production. In the summer months, dry winds churn up so much dust that many residents suffer from what’s known as valley fever, a fungal infection that causes flulike symptoms. Not long ago, when wildfires were raging across California, winds pushed the smoke into Tulare, leaving an acrid smell in the air.
Citizens for Hospital Accountability began as a simple Facebook page. At first, the group’s leaders hoped that Alex Gutiérrez would run for Kumar’s seat, but he was planning to stand for a position on the city council. Senovia was the backup choice. She had grown up as the youngest of twelve children, in the central Mexican state of Aguascalientes. Her parents were impoverished farmers who cultivated corn and beans until a drought forced them to abandon their land. She started working full time when she was sixteen; when she was twenty-four, she crossed the border at Tijuana to join her boyfriend, Miguel Gutiérrez, who was living in Los Angeles. They married and, two years later, moved to Tulare, where Senovia raised five boys and supplemented the family’s income by working part time as a housekeeper. When she was thirty-five, she got her high-school diploma, then attended community college and went on to earn a B.A. at California State University, Fresno. In 2015, she became an American citizen and completed a master’s degree in social work.
Alex doubted whether his mother would agree to enter the race. She had never shown much interest in politics. “Growing up as immigrants, parents know what’s happening, but, aside from voting, they don’t really want to get involved,” he said. Over family dinners in Senovia’s three-bedroom home, Alex told her stories about the “corruption and mismanagement” that he said was hurting the hospital. “I will happily do it because you’re so involved,” Senovia told him.
Hospital-board races are usually small-time affairs. One former member of the Tulare board said that her campaign had cost just a hundred and fifty dollars, which she used to buy signs and cards that she handed out door-to-door. In the recall, which had been set for July 11, 2017, voter turnout was expected to be fewer than fifteen hundred people. Still, Alex decided to take a break from college and serve as his mother’s campaign manager. He suspected that the race would be bitterly contested, and expensive. He calculated that ten thousand dollars should cover the costs. To help, Citizens for Hospital Accountability hosted a fund-raiser on Cinco de Mayo. The invitation featured a photograph of Senovia in a pink dress, surrounded by her husband and five children, standing in front of a mural depicting the foothills of the Sierra Nevadas.
Senovia was nervous about her first big campaign event, which was held in an orchard, where guests ate handmade tacos. Tulare County is largely Republican; Trump won it with fifty-three per cent of the vote in 2016, and the district’s representative in the House, Devin Nunes, has spearheaded efforts to counter the Russia investigation. But the hospital board was a crossover issue. One of Senovia’s supporters, a dairyman of Portuguese descent, pulled Alex aside at the fund-raiser to tell him that Senovia’s “classy” appearance and her foreign accent somehow reminded him of Melania Trump, whose husband he had supported in the 2016 election. (Alex, a Bernie Sanders fan, laughed and suggested that this might not be an apt comparison.)
After giving a speech, Senovia told Alex that she was pleased that the event had been held on Cinco de Mayo, which commemorates the Mexican Army’s victory over France in the Battle of Puebla. “The French could not believe they were defeated by Mexico,” Senovia told her son. “I am going to beat Kumar, and he won’t be able to believe that a Mexican woman defeated him.”
But Benzeevi wasn’t going to let his opponents win without putting up a fight. While Alex and Senovia were soliciting small donations from neighbors, Benzeevi got on a plane to Israel to meet with Psy-Group.
Psy-Group operated out of a nondescript building in a commercial area about twenty minutes outside Tel Aviv. Its offices were on the fourth floor, behind an unmarked door. Employees used key cards to enter, and yet, for a private intelligence firm, security was comically lax, particularly between noon and 2 p.m., when men carrying motorcycle helmets raced in and out, delivering lunch. Clients were escorted through a communal room, which had a big-screen TV facing a large, listing couch, where twentysomethings in faded jeans and T-shirts spent their breaks playing Mortal Kombat and fifa 17.
Burstien tried to position Psy-Group as a more responsible alternative to Black Cube, which was known for a willingness to break the rules. “I’m not saying we’re good guys or bad guys,” Burstien said in one meeting. “It’s not black or white. The gray has so many shades.” In 2016, Romanian police arrested two Black Cube operatives for illegal hacking and harassment of the country’s leading anticorruption officer. (The pair pleaded guilty and received probation.) Psy-Group tried to capitalize on Black Cube’s legal troubles. Burstien reassured prospective clients that lawyers vetted everything the company’s operatives did. Former company officials said that Psy-Group didn’t hack or appropriate the identities of real people for its avatars. It clandestinely recorded conversations, but never in jurisdictions that required “two-party” consent, which would have made the practice illegal.
The company’s claims of legal legitimacy, however, skirted the fact that regulations haven’t kept pace with advances in technology. “What are the regulations? What’s the law?” Tamir Pardo, who was the director of Mossad from 2011 to 2016, said. “There are no laws. There are no regulations. That’s the main problem. You can do almost whatever you want.”
Psy-Group went to great lengths to disguise its activities. Employees were occasionally instructed to go to libraries or Internet cafés, where they could use so-called “white” computers, which could not be traced back to the firm. They created dummy Gmail accounts, often employed for one assignment and then discarded. For particularly sensitive operations, Psy-Group created fake front companies and avatars who purported to work there, and then hired real outside contractors who weren’t told that they were doing the bidding of Psy-Group’s clients. Psy-Group operatives sometimes paid the local contractors in cash.
In one meeting, Burstien said that, before a parliamentary election in a European country, his operatives had created a sham think tank. Using avatars, the operatives hired local analysts to work for the think tank, which then disseminated reports to bolster the political campaign of the company’s client and to undermine the reputations of his rivals. In another meeting, Psy-Group officials said that they had created an avatar to help a corporate client win regulatory approval in Europe. Over time, the avatar became so well established in the industry that he was quoted in mainstream press reports and even by European parliamentarians. “It’s got to look legit,” a former Psy-Group employee said, of Burstien’s strategy.
Most Psy-Group employees knew little or nothing about the company’s owner, Joel Zamel. According to corporate documents filed in Cyprus, he was born in Australia in 1986. Zamel later moved to Israel, where he earned a master’s degree in government, diplomacy, and strategy, with a specialization in counterterrorism and homeland security. Zamel’s father had made a fortune in the mining business, and Zamel was a skilled networker. He cultivated relationships with high-profile Republicans in the U.S., including Newt Gingrich and Elliott Abrams, who served in foreign-policy positions under Ronald Reagan and George W. Bush, and whom Psy-Group listed as a member of its advisory board. (The Trump Administration recently named Abrams its special envoy to oversee U.S. policy toward Venezuela.)
Documents show that Zamel was a director of a Cyprus-based company called Ioco, which controlled Psy-Group. (Zamel’s lawyers and Burstien declined to say how much of an ownership stake Zamel held in Ioco, or to identify who else provided funding for the venture.) Using Cyprus as a front made it easier for Psy-Group to sell its services in Arab states that don’t work overtly with Israeli companies.
Initially, Psy-Group hoped to make money by investigating jihadi networks, much as Terrogence did. In an early test of concept, a Psy-Group operative created a Facebook account for an avatar named Madison. Burstien’s idea was to use Madison as a virtual honey trap. The avatar’s Facebook page depicted Madison as an average American teen-ager from a Christian family in Chicago. She was a fan of Justin Bieber, and after graduating from high school she took a job at a souvenir shop. She posted Facebook messages about religion and expressed interest in learning more about Islam. Eventually, a Facebook member from Casablanca introduced Madison online to two imams at Moroccan mosques, one of whom offered to guide her through the process of becoming a Muslim.
Madison’s conversion was conducted through Skype. The call required a female Psy-Group employee to bring Madison to life briefly and chant the Shahada, a profession of faith, from a desk in the company’s offices. “Finally! I’m a Muslim,” Madison wrote on Facebook. “I feel at home.” She added a smiley-face emoticon.
After her conversion, Madison began to come into contact with Facebook members who espoused more radical beliefs. One of her new friends was an isis fighter in Raqqa, Syria, who encouraged her to become an isisbride. At that point, Burstien decided to end the operation, which, he felt, had demonstrated the company’s ability to create convincing “deep” avatars. Not long afterward, he sent representatives to pitch State Department officials on an influence campaign, “modeled on the successful ‘Madison’ engagement,” that would “interrupt the radicalization and recruitment chain.” The State Department never acted on the proposal.
Psy-Group had more success pitching an operation, code-named Project Butterfly, to wealthy Jewish-American donors. The operation targeted what Psy-Group described as “anti-Israel” activists on American college campuses who supported the Boycott, Divestment, Sanctions movement, known as B.D.S.
Supporters of B.D.S. see the movement as a way to use nonviolent protest to pressure Israel about its treatment of the Palestinians; detractors say that B.D.S. wrongly singles out Israel as a human-rights offender. B.D.S. is anathema to many ardent supporters of the Israeli government.
In early meetings with donors, in New York, Burstien said that the key to mounting an effective anti-B.D.S. campaign was to make it look as though Israel, and the Jewish-American community, had nothing to do with the effort. The goal of Butterfly, according to a 2017 company document, was to “destabilize and disrupt anti-Israel movements from within.” Psy-Group operatives scoured the Internet, social-media accounts, and the “deep” Web—areas of the Internet not indexed by search engines like Google—for derogatory information about B.D.S. activists. If a student claimed to be a pious Muslim, for example, Psy-Group operatives would look for photographs of him engaging in behavior unacceptable to many pious Muslims, such as drinking alcohol or having an affair. Psy-Group would then release the information online using avatars and Web sites that couldn’t be traced back to the company or its donors.
Project Butterfly launched in February, 2016, and Psy-Group asked donors for $2.5 million for operations in 2017. Supporters were told that they were “investing in Israel’s future.” In some cases, a former company employee said, donors asked Psy-Group to target B.D.S. activists at universities where their sons and daughters studied.
The project would focus on as many as ten college campuses. According to an update sent to donors in May, 2017, Psy-Group conducted two “tours of the main theatre of action,” and met with the campaign’s outside “partners,” which it did not name. Psy-Group employees had recently travelled to Washington to visit officials at a think tank called the Foundation for Defense of Democracies, which had shared some of its research on the B.D.S. movement. In a follow-up meeting, which was attended by Burstien, Psy-Group provided F.D.D. with a confidential memo describing how it had compiled dossiers on nine activists, including a lecturer at the University of California, Berkeley. In the memo, Psy-Group asked the foundation for guidance on identifying future targets. According to an F.D.D. official, the foundation “did not end up contracting with them, and their research did little to advance our own.”
Burstien recruited Ram Ben-Barak, a former deputy director of Mossad, to help with the project. As the director general of Israel’s Ministry of Strategic Affairs, from 2014 to 2016, Ben-Barak had drawn up a plan for the state to combat the B.D.S. movement, but it was never implemented. Ben-Barak was enthusiastic about Butterfly. He said that the fight against B.D.S. was like “a war.” In the case of B.D.S. activists, he said, “you don’t kill them but you do have to deal with them in other ways.”