Chinese intelligence operatives are using LinkedIn and other job platforms to target Western professionals with access to sensitive information. An official advisory warns of the coordinated recruitment campaign.
Chinese spies are leveraging professional networking sites to identify and recruit individuals with access to non-public information, according to a newly issued advisory.
The intelligence agencies warn that operatives create fake profiles and personas on LinkedIn to establish relationships with target individuals. Once trust is established, the recruiters attempt to extract sensitive corporate or government data.
The targeting strategy focuses on professionals in technology, defense, finance, and other sectors handling restricted information. Operatives often pose as legitimate recruiters or business contacts, gradually shifting conversations toward requests for proprietary details or classified material.
Common tactics include:
- Offering lucrative job opportunities to build credibility
- Requesting information "for interview preparation" or "market research"
- Exploiting professional curiosity about competitors or industry trends
- Cultivating relationships over months before making direct requests
The advisory recommends professionals verify recruiter identities through official company channels before sharing any information. Users should be cautious of unsolicited job offers with unusually high compensation or vague job descriptions.
Organizations are advised to conduct security awareness training emphasizing the risks of social engineering on public platforms. Employees should report suspicious recruiting activity to their security teams.
This recruitment method represents a shift in espionage tactics, moving beyond traditional hacking to exploit human vulnerability. The use of legitimate business platforms makes detection difficult, as the activity appears indistinguishable from normal professional networking.
No specific number of compromised individuals has been disclosed, though the advisory suggests the campaign is ongoing and widespread.
Apple has published SOC 3 audit reports for its Private Cloud Compute infrastructure, providing third-party verification of security controls for on-device AI processing that routes some tasks to Apple servers.
A developer discovered their coding interview assignment included hidden malware designed to execute via Git hooks. The sophisticated setup raised questions about interview practices and candidate vetting.
Engineers designing passkeys overlooked critical usability issues that confuse average users, according to criticism gaining traction in tech communities. The passwordless authentication standard is struggling with consumer adoption due to poor design decisions.
Upbound Group disclosed that hackers exploited stolen data to create $13 million in fraudulent Acima leases. The fintech company's security breach gave threat actors access to customer information used to establish fake lease accounts.