FBI and DOJ Seize 13 Domains Linked to Chinese Espionage Efforts
Federal authorities have dismantled a network of fraudulent consulting firms aimed at recruiting U.S. security clearance holders for espionage activities. The U.S. Department of Justice and FBI announced the seizure of 13 domains linked to suspected Chinese state-sponsored operatives who posed as legitimate organizations to entice Americans with government and military security clearances.
This operation did not involve traditional hacking methods but instead relied on deceptive emails featuring fake job offers and financial incentives to extract sensitive information from targets. The seized domains, including names like centrikglobalconsulting.com and rightinfoconsult.com, were designed to mimic typical professional services firms. However, their true purpose was to lure individuals into disclosing classified or sensitive information in exchange for payment.
The operators of these domains advertised fake job opportunities that promised compensation for writing reports and providing consulting insights. In reality, these reports were requests for information that foreign intelligence services would find valuable.
A notable aspect of this campaign was its use of AI-generated content to create convincing fake personas. The FBI has observed that Chinese intelligence services increasingly utilize AI-generated materials, including profile photos and biographical details, to fabricate the appearance of real individuals managing legitimate businesses. These fabricated identities were then used on platforms like LinkedIn to initiate contact with potential targets.
The domain registrations spanned from November 2023 to October 2025, indicating a sustained campaign that operated under the radar of the intelligence community for nearly two years.
Assistant Attorney General for National Security John A. Eisenberg characterized the seizures as a warning regarding the ongoing threat posed by foreign entities seeking to exploit financial incentives to compromise Americans in sensitive positions. He stated, "These seizures illustrate the tactics foreign actors use to target those who hold or have held U.S. security clearances."
The timing of this operation aligns with broader warnings from the Five Eyes intelligence alliance, which includes the U.S., UK, Canada, Australia, and New Zealand. The alliance has cautioned that similar recruitment tactics are being employed to target personnel across all member countries, suggesting that this campaign was not limited to American targets.
The use of AI-generated content in espionage recruitment is a growing concern. A fake LinkedIn profile featuring an AI-generated headshot, a plausible work history, and even AI-written thought leadership posts can now easily pass initial scrutiny. The FBI has identified this as an emerging tactic of Chinese intelligence services, with this case serving as a clear example of its implementation.
