China-Linked Fake Consulting Sites Targeting US Clearance Holders Seized
Essential information
- Published
- 11/06/2026 09:23
- Modified
- 11/06/2026 07:36
- Source / Author
- AlienVault
- Confidence
- 100/100
- Report type(s)
- threat-report
- Labels / Tags
- ai-generated profiles china espionage fake consulting firms job platforms recruitment operation security clearance social engineering
- Tags
- 2026-06-11 ai-generated profiles china espionage fake consulting firms job platforms recruitment operation security clearance social engineering
- Related entities
- 13 indicators, 13 observables, 16 others
Description
US Federal authorities have seized 13 domains allegedly used in a Chinese intelligence-linked operation to recruit Americans with access to classified government information. The websites posed as legitimate consulting firms, offering vague consultancy and advisory roles to current and former US government employees, military personnel, and security clearance holders. The operation, which began in November 2023, used fake company websites, online job postings, and social media recruiting to approach potential targets. Recruiters offered paid consulting work, then pressured candidates to share confidential insider information. The campaign employed false personas, stolen identities, AI-generated profile photos, encrypted messaging, cryptocurrency, and fake contracts to appear legitimate. Job postings appeared on platforms including Upwork, Expertia AI, and Hubstaff Talent, covering topics aligned with Chinese government interests.