Law Enforcement Disrupts Alleged Scheme Targeting Federal Workers with Fake Consulting Jobs
A brazen scheme to recruit federal government workers to hand over information to suspected Chinese agents is disrupted, with law enforcement disabling 13 websites used in the scheme.
“These domain seizures offer a glimpse at how foreign actors can use promises of easy money to lure Americans into revealing sensitive or classified information that they are duty‑bound to protect,” said Assistant Attorney General for National Security John A. Eisenberg.
Fake Consulting Websites
According to court documents, the conspirators created websites for fake consulting companies advertising generic “consulting jobs.” The stated purpose was to recruit current and former U.S. government and military employees with security clearances to provide expertise to unnamed clients.
Among the fake positions were “Senior Analyst” and “International Affairs Consultant” with potential candidates found on job boards and freelance platforms like Upwork, Expertia AI, and Post Job Free.
Prosecutors say that during interviews, recruiters pressured candidates to share confidential information about their duties, with conspirators using contracts and confidentiality agreements to give the “bogus consulting companies an air of legitimacy.” The conspirators paid money for the information using cryptocurrency and accounts with fake names.
“By seizing these domains and exposing these tactics, we are working to protect national security, safeguard American ingenuity, and help the public recognize and defend against these threats,” said FBI Special Agent in Charge Dominique Evans of the FBI’s Norfolk Field Office.
The conspirators deny any involvement by a foreign government.
The FBI placed takeover pages on the seized domains warning visitors about the intended illegal activity. It also reminds federal employees that “Anyone approached online with offers of easy income for vague ‘consulting’ work should treat those overtures with extreme caution and remain vigilant for warning signs of malicious targeting.”
