Chinese Spies Using LinkedIn to Gather Sensitive Information from Westerners

Chinese intelligence operatives are allegedly using job recruitment platforms, such as LinkedIn, to lure Western professionals into revealing sensitive information, as outlined in a joint advisory from the FBI, the U.K.’s MI5, and the governments of Australia, Canada, and New Zealand.

The advisory reveals that these agents create fake identities as online recruiters and HR firms, claiming to represent non-existent companies purportedly operating outside of China. Their goal is to obtain confidential information that could benefit Beijing.

This warning comes amidst ongoing concerns regarding Chinese espionage, even as the U.S. and U.K. attempt to strengthen ties with Beijing. Although cyberattacks remain a prevalent method of data theft, the advisory underscores the importance of building relationships through public channels and community engagement.

According to the advisory, China’s military intelligence services are actively seeking critical military, political, and economic intelligence that could grant China a strategic edge over the Five Eyes nations—an enduring intelligence alliance among the countries issuing this alert.

The spies are particularly focused on developing lasting relationships with individuals who have security clearances and military backgrounds, especially in the Indo-Pacific region, as well as journalists, academics, and think-tank members with access to unclassified information. Their selection criteria include evaluating resumes and assessing the potential for sensitive or non-public insights.

The advisory points out that unclassified information can hold immense value for these agents, especially when combined with other sensitive data that may influence decision-making in Beijing.

In response to an inquiry from TechCrunch, a LinkedIn representative remarked: “Creating a fake account or misrepresenting your identity is a clear violation of our terms of service. We are dedicated to identifying state-sponsored abuse and will continue to uphold our policies against fraudulent accounts.”