Tuesday 6 October 2026
Afternoon EditionRSS
ZOTPAPER

News without the noise

ZOTPAPER
Security

Five Eyes warns of AI-powered Chinese espionage on LinkedIn

Industrial-scale operation targets government staff, military personnel and academics after 2014-15 data breach

By LineZotpaper
Published
Read Time2 min
The Five Eyes intelligence alliance issued an unprecedented joint bulletin on June 3 warning that Chinese spies are using professional networking sites such as LinkedIn to run an industrial-scale online espionage campaign against tens of thousands of government staff, military personnel and academics in the United States and NATO countries, with agents now using generative AI to tailor their approaches.

The Five Eyes alliance, made up of the United States, United Kingdom, Canada, Australia and New Zealand, published the joint bulletin in a rare indication of collective alarm over China's espionage on professional networking platforms.

The campaign is built on personal data obtained during China's 2014-15 hack of the US Office of Personnel Management (OPM), which exposed the records of millions of US security clearance holders and applicants. Armed with that information, agents from China's Ministry of State Security (MSS) have approached tens of thousands of targets, including NATO government staffers, military personnel, academics and others with access to sensitive information.

The operation combines scale with precision. MSS agents use generative AI to craft messages tailored to each individual target's resume and expertise, according to the bulletin and reporting by The Diplomat. Posing as corporate recruiters or business consultants, agents offer targets easy money in exchange for writing freelance consulting reports on seemingly innocuous topics related to their work.

The fictitious identities backing these approaches are often reinforced with AI-generated profile pictures and fabricated employment histories, making the operations harder to detect.

The bulletin referenced reporting from outlets including Reuters, the BBC, the New York Times and France 24, indicating the campaign has been observed across US and European government and research communities in recent years. The US Justice Department has also taken action, disabling 13 websites backed by suspected Chinese agents who sought sensitive information.

§

Analysis

Why This Matters

  • The campaign targets individuals with access to sensitive government and military information, raising the risk of classified material being leaked through what appear to be routine freelance consulting arrangements.
  • Generative AI is making espionage harder to spot by producing tailored, grammatically convincing overtures at scale.
  • The operation leverages data from the 2014-15 OPM breach, showing how compromised records can fuel active targeting years later.

Background

The OPM hack exposed the personal records of US federal personnel and clearance applicants in 2014-15, one of the largest data breaches of government information on record. The Five Eyes bulletin marks a coordinated effort by the five intelligence-sharing nations to publicly flag the threat. Professional networking sites have become a favoured channel for intelligence services because they allow operatives to identify, vet and approach targets under a plausible cover identity.

Key Perspectives

Five Eyes alliance: The member states warn that espionage via LinkedIn and similar platforms is aggressive, industrial-scale and increasingly sophisticated, warranting a rare collective public warning. Targets (government staff, military, academics): They face a plausible recruitment ruse: freelance consulting offers that appear benign but may be designed to elicit sensitive information for financial reward. Critics and sceptics: Questions remain about how effectively platforms and governments can detect AI-generated profiles at scale, and whether the public warning alone is enough to disrupt an operation built on tailored approaches.

What to Watch

  • Whether LinkedIn and other professional networking platforms introduce stronger identity verification and profile vetting in response to the bulletin.
  • Any further enforcement action by the US Justice Department or partner agencies against suspected front websites and fake profiles.
  • Whether the Five Eyes warning leads to expanded reporting or operational guidance for at-risk sectors such as defence contractors and universities.

Sources

Zotpaper

Written by software from the reporting listed above, scored by an automated standards desk, and published without a person reading it first. If something here is wrong, tell the editor and it will be put right.

How we workReport an errorSubscribe