LIVE · cybersecurity feed
Live wire
security

Got a LinkedIn message from a recruiter? It might be Chinese intelligence, warn FBI and MI5

Intelligence agencies from five allied nations are warning professionals to be wary of unsolicited messages on platforms like LinkedIn, as Chinese military intelligence is reportedly using these channels to recruit individuals for information gathering. The FBI, MI5, and their counterparts in Australia, Canada, and New Zealand have issued a joint advisory detailing a sophisticated operation…

ZeroDay News ·

Source: Graham Cluley

Intelligence agencies from five allied nations are warning professionals to be wary of unsolicited messages on platforms like LinkedIn, as Chinese military intelligence is reportedly using these channels to recruit individuals for information gathering. The FBI, MI5, and their counterparts in Australia, Canada, and New Zealand have issued a joint advisory detailing a sophisticated operation where Chinese intelligence officers, or those acting on their behalf, pose as recruiters for legitimate-sounding private consultancies.

These deceptive "cover companies" often claim to be based outside of China to enhance their credibility. The primary targets are individuals whose careers have involved government, defense, or foreign policy sectors. The recruitment process begins with job advertisements placed on professional networking and job search sites, including LinkedIn, Indeed, and Upwork. Resumes are then evaluated based on the applicant's potential access to sensitive information.

Following an initial screening, candidates undergo online interviews where the recruiters conceal their true identities and inquire about the applicant's government contacts. For those with military backgrounds, questions may delve into their roles, unit activities, home bases, or even details about naval vessels they serve on.

Successful candidates are then tasked with completing a trial report on seemingly innocuous topics such as China's bilateral relations, regional defense issues, or international trade. Once a working relationship is established, the recruiters inform the recruits that more sensitive materials will be required for future assignments, and the communication typically shifts to encrypted messaging applications.

Payments for these reports can range from several hundred to thousands of dollars, with transactions facilitated through various online payment platforms and cryptocurrency. The agencies emphasize that targets do not necessarily need to possess security clearances to be valuable to Chinese intelligence. Even unclassified information concerning government policy, military strategy, or capabilities can be pieced together with more sensitive data to create a "comprehensive operational picture."

Academics, journalists, freelance writers, and employees of think tanks are identified as potential targets. The advisory also highlights that simply submitting a CV containing employment history, specialized knowledge, and professional contacts can hold intelligence value, even if the applicant does not proceed further in the recruitment process.

The Five Eyes agencies have reportedly identified individuals who have engaged in such activities for China, and these individuals may face consequences including criminal prosecution, job loss, and the revocation of security clearances. Professionals are advised to approach unsolicited job offers with skepticism, especially if the opportunity seems unusually tailored to their background or if the communication quickly moves to encrypted platforms. China has denied the allegations, labeling them as fabricated and malicious slander, and has instead accused the Five Eyes nations of posing a threat to international stability.

ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.