Buy, Don’t Steal: The Economics of Cognitive Warfare

Small Wars Journal | Robert Green

Chinese state-backed actors downloaded voter registration records from six US states in January 2022 without breaching any cyber defences, incurring negligible acquisition costs. Commercial availability allowed Chinese intelligence to acquire millions of personal data points legally for less than a standard six-figure price tag. In contrast, covert inbox compromise via contractors like i-Soon costs between $10,000 and $75,000 per target account, while zero-day exploits reach up to $7 million.

Data-driven influence campaigns exploit this asymmetry by converting cheap personal records into tailored targeting engines for digital psychological operations. This creates an unpriced national security liability across democratic populations. A single drone costs $35,000. Data acquisition costs even less, allowing hostile powers to scale personalised disinformation while avoiding sanctions, attribution, or exploit burning. Expanding bulk-data transfer restrictions under Executive Order 14117 raises foreign acquisition costs, forcing adversary collection back into expensive covert channels.

Comment

Commercial data acquisition fundamentally disrupts the threat detection models relied upon by the National Counterintelligence and Security Center by eliminating the overt signatures of technical network intrusion. When adversary intelligence services shift from hacking private infrastructure to purchasing aggregated state voter files, security agencies lose the technical telemetry—such as zero-day signatures—typically used for threat attribution. The leaks surrounding the Chinese contractor i-Soon confirm that foreign intelligence units calibrate their collection pathways against market price and operational risk.

This shift from covert intrusion to commercial acquisition drives a second-order reallocation of national security resources. Enforcement mechanisms under Executive Order 14117 transfer the burden of threat mitigation from network defensive teams to regulatory compliance auditors. As a result, future counter-intelligence operations conducted by the Federal Bureau of Investigation will depend heavily on tracing corporate data transactions rather than detecting adversary malware payloads.

Strategic Question for Discussion

Which mechanism poses a greater operational hurdle for the Federal Bureau of Investigation — detecting zero-day exploits fielded by contractors like i-Soon, or auditing corporate compliance across global supply chains under Executive Order 14117?

The available evidence points toward regulatory compliance under Executive Order 14117 presenting the far more complex operational challenge. While technical signatures of zero-day exploits from contractors like i-Soon follow established cyber forensic protocols, auditing opaque corporate data brokers requires monitoring cross-border commercial transactions that fall outside traditional counter-intelligence channels.

Share your assessment in the comments below.

Read the original article