The U.S. and its Five Eyes allies warned that Chinese intelligence officials are using fake job offers on LinkedIn and other platforms to recruit assets.

This operation represents a shift in espionage tactics by leveraging the openness of professional networking sites to target individuals with access to sensitive data. By posing as human resources professionals, operatives can bypass traditional security filters to establish trust with high-value targets.

Officials from the Five Eyes alliance, which consists of five intelligence partners [1], said the spies operate by creating fraudulent profiles. These accounts are designed to look like legitimate headhunters or corporate recruiters. Once a connection is established, the operatives attempt to extract privileged information or recruit the target into deeper intelligence operations [1], [2].

The targeting efforts are focused on job seekers within the U.S. and other member countries of the alliance [1], [2]. The strategy relies on the inherent desire of professionals to advance their careers, making them more susceptible to offers that seem lucrative or prestigious.

According to the warnings, these fake postings are not merely for data collection but are part of a broader effort to build a network of assets [2]. These assets may be asked to provide internal documents or technical specifications under the guise of a job interview process [1].

Intelligence agencies said professionals should exercise caution when engaging with unknown recruiters. They recommend verifying the identity of headhunters through official company channels and remaining skeptical of unsolicited offers that request sensitive corporate or government information [2].

“Chinese intelligence officials posing as headhunters on job platforms”

The use of professional networking sites for espionage highlights a vulnerability in the modern digital labor market. By weaponizing the 'headhunter' persona, Chinese intelligence can conduct targeted reconnaissance and recruitment with a level of plausible deniability that traditional spying lacks. This forces a shift in corporate security training, moving beyond phishing emails to include the verification of professional identities during the hiring process.