DOJ Shuts Down Alleged China-Linked Operation Targeting Federal Employees

The U.S. Justice Department and FBI have seized 13 websites allegedly run by Chinese intelligence to target federal employees. The operation, which began in November 2023, used fake consulting firms on job platforms to entice current and former officials with security clearances into sharing sensitive information. This action comes amid increased vulnerability due to federal layoffs and prior warnings from the U.S. Army about such recruitment tactics.

DOJ website seizures

• ▪The FBI and Justice Department seized 13 websites allegedly used by Chinese intelligence operatives.
• ▪The takedown is part of a U.S. government effort to disrupt foreign intelligence schemes using online recruiting and financial incentives.
• ▪The seized domains included sites for firms named Centrik Global Consulting, Rightinfo Consulting, and SafeSec Group, among others.

Fake consulting firm tactics

• ▪The websites were designed to look like legitimate consulting firms advertising vague, well-paid consulting roles.
• ▪The alleged scheme involved encrypted messaging apps like Telegram, overseas payments, and cryptocurrency accounts registered under false names.
• ▪The operators allegedly used aliases, fake personas, stolen identities, and artificial intelligence-generated photographs to appear credible.

Recruitment targeting methods

• ▪The operation targeted current and former U.S. officials and military personnel who hold security clearances.
• ▪The operators used familiar job-market platforms and freelance sites to advertise positions like “Senior Analyst” and “International Affairs Consultant.”
• ▪The campaign, which allegedly began in November 2023, sought to entice targets into producing research reports or sharing insider information.

Federal workforce vulnerability

• ▪Recent waves of federal layoffs have pushed thousands of government employees and contractors into an uncertain job market.
• ▪This disruption in the federal job market has created renewed collection opportunities for foreign intelligence services.

Prior intelligence warnings

• ▪A suspected Chinese intelligence outfit previously contacted a former senior State Department official to pay for an assessment of U.S. policy in Venezuela.
• ▪In November, Army Lt. Gen. Anthony R. Hale issued a memo warning that foreign adversaries are targeting personnel through fake companies and recruiters.
• ▪The Army's advisory was sent to more than a million personnel and was later released to the media.

1 source