The FBI has seized 13 websites that officials say were part of a Chinese effort to target American workers with access to classified or sensitive government information. According to reports from the Justice Department, the websites purported to be affiliated with consulting companies that advertised job openings for current and former holders of security clearances. However, officials confirmed that all companies were fake and the job postings were fraudulent, designed to recruit workers who could be duped into disclosing sensitive information. As reported by the FBI, these websites are often linked or referenced within the entities' job postings on LinkedIn and other hiring platforms, making them more difficult to identify as fraudulent.
As reported in an FBI affidavit, the fake websites relied on fraudulent or stolen identities and AI-generated photographs to appear legitimate. The websites advertised generic consulting jobs specifically geared toward current or former US government employees, with positions including "International Relations Analyst (remote)", "Defense Analyst", "Jobs for former military personnel" and generic consulting positions. According to the Justice Department, seven unknown individuals were recruited through these sites, with recruiters specifically asking for documents and materials on topics related to China and the U.S.-China relationship, Iran, and the Israel-Palestine conflict. The FBI believes the people who ran the scheme operated abroad and on behalf of the Chinese government, either knowingly or unknowingly. The sites were funded through cryptocurrency and accounts in foreign banks, with conspirators paying recruits through accounts opened in the United States but funded from abroad.
The internet domain seizure is part of a broader effort by Western law enforcement and intelligence agencies to address alleged Chinese government recruitment activities. Last week, the English-speaking Five Eyes intelligence-sharing alliance - comprising Australia, Canada, New Zealand, the UK and the US - issued a bulletin warning that China is targeting personnel from those countries on job websites. The bulletin revealed that spies for Chinese military intelligence have been posing as workers acting on behalf of private businesses or think tanks, advertising bogus jobs such as foreign policy or defense analysts and pressuring candidates to provide non-public information.
According to FBI special agent Dan Wierzbicki, law enforcement officials identified the websites through information provided by targets who came forward to report suspicious interactions. As reported by Wierzbicki, the FBI conducted interviews with people who noticed something unusual, including those who were getting paid by cryptocurrency or online payment systems that seemed unconventional. The FBI believes there are other websites serving similar purposes and is seeking public assistance in identifying them. The case highlights the risks associated with using fake companies, artificial intelligence, and cryptocurrency in recruitment schemes that have access to sensitive information, and underscores the need to strengthen vetting of personnel in the public sector.
A spokesperson for the Chinese embassy in Washington called allegations of Chinese espionage 'entirely fabricated' and 'malicious slander'. The embassy's response came in direct response to the FBI's seizure of the 13 websites and the broader intelligence community warnings about Chinese recruitment activities targeting sensitive information holders. The Justice Department noted that 'the people running the websites denied any involvement by any foreign government' in their response. It remains unclear whether any classified information was transmitted through this scheme, though the FBI believes the perpetrators used personal data theft and substantial payments for research reports to gain access to sensitive information.
