Latest news with #SmiaoIntelligence
Ya Libnan
26-03-2025
- Business
- Ya Libnan
Secretive Chinese network tries to lure fired US federal workers, research shows
Max Lesser, a senior analyst on emerging threats at the Foundation for Defense of Democracies poses for a portrait at an office in Washington, D.C., U.S., March 24, 2025. REUTERS/Carlos Barria Washington- A network of companies operated by a secretive Chinese tech firm has been trying to recruit recently laid-off U.S. government workers, according to job ads and a researcher who uncovered the campaign. Max Lesser, a senior analyst on emerging threats with the Washington-based think tank Foundation for Defense of Democracies, said some companies placing recruitment ads were 'part of a broader network of fake consulting and headhunting firms targeting former government employees and AI researchers.' Little information is publicly available on the four consultancies and recruitment companies allegedly involved in the network, which in some cases shared overlapping websites, were hosted on the same server, or had other digital links, according to Reuters' reporting and Lesser's research. The four companies' websites are hosted at the same IP address alongside Smiao Intelligence, an internet services company whose website became unavailable during Reuters' reporting. Reuters could not determine the nature of the relationship between Smiao Intelligence and the four companies. The news agency's attempts to track down the four companies and Smiao Intelligence ran into numerous dead-ends including unanswered phone calls, phone numbers that no longer work, fake addresses, addresses that lead to empty fields, unanswered emails and deleted job listings from LinkedIn. Lesser, who uncovered the network and shared his research with Reuters ahead of publication, said the campaign follows 'well-established' techniques used by previous Chinese intelligence operations. 'What makes this activity significant,' he said, 'is that the network seeks to exploit the financial vulnerabilities of former federal workers affected by recent mass layoffs.' Reuters could not determine if the companies are linked to the Chinese government or whether any former federal workers were recruited. Asked about the research, three intelligence analysts told Reuters the network appeared to be a prime example of how foreign-linked entities are trying to gather intelligence from staff fired or forced into retirement by President Donald Trump and billionaire tech tycoon Elon Musk's Department of Government Efficiency. Once employed by the network, federal employees could then be asked to share increasingly sensitive information about government operations, or recommend additional people who might be targeted for willing or unwitting participation, the analysts said. A spokesperson for the Chinese Embassy in Washington told Reuters in an email that China was unaware of any of the entities allegedly involved in the campaign and Beijing respects data privacy and security. A White House spokesperson said China was constantly trying to exploit the United States' 'free and open system' through espionage and coercion. 'Both active and former government employees must recognize the danger these governments pose and the importance of safeguarding government information,' the spokesperson said. February 28 that U.S. intelligence believes Russia and China are targeting disgruntled U.S. government employees, something both countries have done for years. The companies in the network – which posted job ads to Craigslist, LinkedIn and other job sites – could be concrete evidence such operations are underway, Lesser said. Reuters reported earlier this month that some U.S. government workers with top security clearances were not given standard exit briefings which, in part, cover what to do if approached by foreign adversaries. 'GEOPOLITICAL RISK CONSULTING' One of the companies in the network, RiverMerge Strategies, bills itself on its website as a 'professional geopolitical risk consulting company' and posted two since-deleted job listings on its since-removed LinkedIn page in mid-February. One ad that sought a 'Geopolitical Consulting Advisor' with experience with government agencies, international organizations, or multinational corporations, displayed that it had more than 200 applications, according to a screenshot of the LinkedIn post. The other sought a human resources specialist who could 'utilize a deep understanding of the Washington talent pool to identify candidates with policy or consulting experience,' and 'leverage connections to local professional networks, think tanks, and academic institutions.' The U.S. number for RiverMerge Strategies listed on the company's home page is no longer in service. A separate Chinese phone number, until recently listed on the website's contact page, is the same number listed by Shenzhen Si Xun Software Co., Ltd, an information technology company focused on online retail, commercial automation and catering, according to a Google translation of the company's website. Reuters could not determine the nature of the connection between the network of companies, Smiao Intelligence, and Shenzhen Si Xun Software Co., Ltd. Calls to a phone number listed on the company's website did not go through. RiverMerge Strategies until recently listed two addresses on its website, one in Singapore and the other in Colorado. The Singapore address led to a hostel building within the campus of the Management Development Institute of Singapore, but the company could not be located during a Reuters visit. Its other address led to an address in Boulder, Colorado, tied to Northwest Registered Agent, a business services firm. A person listed on LinkedIn as an employee of RiverMerge, who spoke on condition of anonymity, told Reuters an acquaintance he met at a networking event in China reached out and asked him to help promote job listings for RiverMerge Strategies. The acquaintance, who he knows as 'Eric,' as well as another contact, 'Will,' pays the employee $1,000 or $2,000 every two or three months to post the job listings, he said. A person identifying themselves as William Wells and RiverMerge's 'strategies project manager' responded to an initial Reuters email and asked about Reuters' request for information. Even though the Reuters email identified the sender as a reporter, Wells also inquired whether Reuters was seeking a job, and said they would review a resume and set up a short call. Another company in the network, Wavemax Innovation, placed an ad February 6 on Craigslist offering 'Job Opportunities for Recently Laid-Off U.S. Government Employees.' The ad, which has since expired, sought workers with backgrounds in project management, research, technology, communications, policy analysis and more. Reuters could not establish who saw the ad or whether anyone applied to Wavemax as a result. An email to the address posted in the ad was not returned. When Reuters visited the Singapore address posted to the company's website there was no sign of the company, just a vacant field. A search of Singapore's corporate registry for the company was equally barren. Asked how it verifies job listings, LinkedIn said it uses automated technologies and a team of reviewers to find and remove inauthentic activity and profiles. The spokesperson said on Tuesday RiverMerge Strategies' profile had been restricted. In response to questions about Reuters' findings, an FBI spokesperson warned that Chinese intelligence officers can represent themselves as think tanks, academic institutions and recruiting firms to target 'current, former, and prospective' U.S. government employees. Agents for the Chinese government have used similar tactics in the past. In 2020 a Singaporean national named Jun Wei Yeo pleaded guilty in a U.S. federal court to acting as an agent of a foreign power, starting in 2015. Prosecutors alleged he worked to spot and assess Americans with access to non-public sensitive information and paid them to write reports for unnamed Asian clients, without disclosing that the work was actually for the Chinese government. That operation relied on a fake consulting company and job advertisements, according to court records. Chinese intelligence operatives told Yeo how to recruit targets, including by asking them if they were 'dissatisfied with work, were having financial troubles [or] had children to support,' according to court records. China's foreign ministry denied any knowledge of Yeo's case and accused the U.S. of repeatedly accusing Beijing of espionage, saying 'it has reached a state of extreme suspicion,' at the time. Foreign intelligence services often use job recruitment scams to recruit sources without them even knowing they are working for a foreign government, David Aaron, a former Department of Justice prosecutor now in private practice, told Reuters. 'I would expect China's intelligence services to dial those efforts up as they see a wave of government employees suddenly having to look for new jobs,' Aaron said, adding that while many former government employees are motivated by patriotism, some may be vulnerable to deceptive tactics. Reuters
NBC News
26-03-2025
- Business
- NBC News
Secretive Chinese network tried to lure fired federal workers, research shows
A network of companies operated by a secretive Chinese tech firm has been trying to recruit recently laid-off U.S. government workers, according to job ads and a researcher who uncovered the campaign. Max Lesser, a senior analyst on emerging threats with the Washington-based think tank Foundation for Defense of Democracies, said some companies placing recruitment ads were 'part of a broader network of fake consulting and headhunting firms targeting former government employees and AI researchers.' Little information is publicly available on the four consultancies and recruitment companies allegedly involved in the network, which in some cases shared overlapping websites, were hosted on the same server, or had other digital links, according to Reuters' reporting and Lesser's research. The four companies' websites are hosted at the same IP address alongside Smiao Intelligence, an internet services company whose website became unavailable during Reuters' reporting. Reuters could not determine the nature of the relationship between Smiao Intelligence and the four companies. The news agency's attempts to track down the four companies and Smiao Intelligence ran into numerous dead ends including unanswered phone calls, phone numbers that no longer work, fake addresses, addresses that lead to empty fields, unanswered emails and deleted job listings from LinkedIn. Lesser, who uncovered the network and shared his research with Reuters ahead of publication, said the campaign follows 'well-established' techniques used by previous Chinese intelligence operations. 'What makes this activity significant,' he said, 'is that the network seeks to exploit the financial vulnerabilities of former federal workers affected by recent mass layoffs.' Reuters could not determine whether the companies are linked to the Chinese government or whether any former federal workers were recruited. Asked about the research, three intelligence analysts told Reuters that the network appeared to be a prime example of how foreign-linked entities are trying to gather intelligence from staff members fired or forced into retirement by President Donald Trump and billionaire tech tycoon Elon Musk's Department of Government Efficiency. Once employed by the network, federal employees could then be asked to share increasingly sensitive information about government operations, or recommend additional people who might be targeted for willing or unwitting participation, the analysts said. A spokesperson for the Chinese Embassy in Washington told Reuters in an email that China was unaware of any of the entities allegedly involved in the campaign and that Beijing respects data privacy and security. A White House spokesperson said China was constantly trying to exploit the United States' 'free and open system' through espionage and coercion. 'Both active and former government employees must recognize the danger these governments pose and the importance of safeguarding government information,' the spokesperson said. CNN reported on Feb. 28 that U.S. intelligence believes Russia and China are targeting disgruntled U.S. government employees, something both countries have done for years. The companies in the network — which posted job ads to Craigslist, LinkedIn and other job sites — could be concrete evidence that such operations are underway, Lesser said.
Japan Times
26-03-2025
- Business
- Japan Times
Secretive Chinese network tries to lure fired federal workers in U.S.
A network of companies operated by a secretive Chinese tech firm has been trying to recruit recently laid-off U.S. government workers, according to job ads and a researcher who uncovered the campaign. Max Lesser, a senior analyst on emerging threats with the Washington-based think tank Foundation for Defense of Democracies, said some companies placing recruitment ads were "part of a broader network of fake consulting and headhunting firms targeting former government employees and AI researchers." Little information is publicly available on the four consultancies and recruitment companies allegedly involved in the network, which in some cases shared overlapping websites, were hosted on the same server, or had other digital links, according to investigations including Lesser's research. The four companies' websites are hosted at the same IP address, a numeric designation that identifies a computer's location on the internet, alongside Smiao Intelligence, an internet services company whose website has become unavailable. The nature of the relationship between Smiao Intelligence and the four companies could not be determined. Attempts to track down the four companies and Smiao Intelligence ran into numerous dead ends including unanswered phone calls, phone numbers that no longer work, fake addresses, addresses that lead to empty fields, unanswered emails and deleted job listings from LinkedIn. Lesser, who uncovered the network and shared his research with Reuters ahead of its publication, said the campaign follows "well-established" techniques used by previous Chinese intelligence operations. "What makes this activity significant," he said, "is that the network seeks to exploit the financial vulnerabilities of former federal workers affected by recent mass layoffs." It could not be determined if the companies are linked to the Chinese government or whether any former federal workers were recruited. Asked about the research, three intelligence analysts said the network appeared to be a prime example of how foreign-linked entities are trying to gather intelligence from staff fired or forced into retirement by U.S. President Donald Trump and billionaire tech tycoon Elon Musk's Department of Government Efficiency. Two of the companies listed addresses in Singapore, but none of them could be located during visits to the addresses. | REUTERS Once employed by the network, federal employees could then be asked to share increasingly sensitive information about government operations, or recommend additional people who might be targeted for willing or unwitting participation, the analysts said. A spokesperson for the Chinese Embassy in Washington said in an email that China was unaware of any of the entities allegedly involved in the campaign and Beijing respects data privacy and security. A White House spokesperson said China was constantly trying to exploit the United States' "free and open system" through espionage and coercion. "Both active and former government employees must recognize the danger these governments pose and the importance of safeguarding government information," the spokesperson said. CNN reported on Feb. 28 that U.S. intelligence believes Russia and China are targeting disgruntled U.S. government employees, something both countries have done for years. The companies in the network — which posted job ads to Craigslist, LinkedIn and other job sites — could be concrete evidence such operations are underway, Lesser said. It was reported earlier this month that some U.S. government workers with top security clearances were not given standard exit briefings which, in part, cover what to do if approached by foreign adversaries. One of the companies in the network, RiverMerge Strategies, bills itself on its website as a "professional geopolitical risk consulting company" and posted two since-deleted job listings on its since-removed LinkedIn page in mid-February. One ad that sought a "Geopolitical Consulting Advisor" with experience with government agencies, international organizations, or multinational corporations, displayed that it had more than 200 applications, according to a screenshot of the LinkedIn post. The other sought a human resources specialist who could "utilize a deep understanding of the Washington talent pool to identify candidates with policy or consulting experience," and "leverage connections to local professional networks, think tanks, and academic institutions." Lesser describes the campaign as following "well-established" techniques used by previous Chinese intelligence operations. | REUTERS The U.S. number for RiverMerge Strategies listed on the company's home page is no longer in service. A separate Chinese phone number, until recently listed on the website's contact page, is the same number listed by Shenzhen Si Xun Software Co., Ltd, an information technology company focused on online retail, commercial automation and catering, according to a Google translation of the company's website. The nature of the connection between the network of companies, Smiao Intelligence, and Shenzhen Si Xun Software Co. could not be determined. Calls to a phone number listed on the company's website did not go through. RiverMerge Strategies until recently listed two addresses on its website, one in Singapore and the other in Colorado. The Singapore address led to a hostel building within the campus of the Management Development Institute of Singapore, but the company could not be located during a visit. Its other address led to an address in Boulder, Colorado, tied to Northwest Registered Agent, a business services firm. A person listed on LinkedIn as an employee of RiverMerge, who spoke on condition of anonymity, said an acquaintance he met at a networking event in China reached out and asked him to help promote job listings for RiverMerge Strategies. The acquaintance, who he knows as "Eric," as well as another contact, "Will,' pays the employee $1,000 or $2,000 every two or three months to post the job listings, he said. A person identifying themselves as William Wells and RiverMerge's "strategies project manager' responded to an initial email and asked about Reuters' request for information. Even though the email identified the sender as a reporter, Wells also inquired whether they were seeking a job, and said the company would review a resume and set up a short call. Another company in the network, Wavemax Innovation, placed an ad on Feb. 6 on Craigslist offering "Job Opportunities for Recently Laid-Off U.S. Government Employees." The ad, which has since expired, sought workers with backgrounds in project management, research, technology, communications, policy analysis and more. It could not be established who saw the ad or whether anyone applied to Wavemax as a result. An email to the address posted in the ad was not returned. When visiting the Singapore address posted to the company's website, there was no sign of the company, just a vacant field. A search of Singapore's corporate registry for the company was equally barren. A vacant plot of land at 6 Marina Green in Singapore on Tuesday. When visiting the Singapore address posted on the website of one of the companies, there was no sign of it, just a vacant field. | REUTERS Asked how it verifies job listings, LinkedIn said it uses automated technologies and a team of reviewers to find and remove inauthentic activity and profiles. A spokesperson said on Tuesday RiverMerge Strategies' profile had been restricted. In response to questions about the findings, an FBI spokesperson warned that Chinese intelligence officers can represent themselves as think tanks, academic institutions and recruiting firms to target "current, former, and prospective" U.S. government employees. Agents for the Chinese government have used similar tactics in the past. In 2020 a Singaporean national named Jun Wei Yeo pleaded guilty in a U.S. federal court to acting as an agent of a foreign power, starting in 2015. Prosecutors alleged he worked to spot and assess Americans with access to non-public sensitive information and paid them to write reports for unnamed Asian clients, without disclosing the work was actually for the Chinese government. That operation relied on a fake consulting company and job advertisements, according to court records. Chinese intelligence operatives told Yeo how to recruit targets, including by asking them if they were "dissatisfied with work, were having financial troubles had children to support," according to court records. China's foreign ministry denied any knowledge of Yeo's case and accused the U.S. of repeatedly accusing Beijing of espionage, saying "it has reached a state of extreme suspicion," the South China Morning Post reported at the time. Foreign intelligence services often use job recruitment scams to recruit sources without them even knowing they are working for a foreign government, David Aaron, a former Department of Justice prosecutor now in private practice, said. "I would expect China's intelligence services to dial those efforts up as they see a wave of government employees suddenly having to look for new jobs,' Aaron said, adding that while many former government employees are motivated by patriotism, some may be vulnerable to deceptive tactics.
USA Today
25-03-2025
- Business
- USA Today
Fired federal workers targeted by secretive Chinese network
Fired federal workers targeted by secretive Chinese network Show Caption Hide Caption Which federal workers are out of a job? The Trump administration has cut thousands of federal roles across various agencies, including the CDC and Forest Service. Here's who's been impacted. A network of companies operated by a secretive Chinese tech firm has been trying to recruit recently laid-off U.S. government workers, according to job ads and a researcher who uncovered the campaign. Max Lesser, a senior analyst on emerging threats with the Washington-based think tank Foundation for Defense of Democracies, said some companies placing recruitment ads were "part of a broader network of fake consulting and headhunting firms targeting former government employees and AI researchers." Little information is publicly available on the four consultancies and recruitment companies allegedly involved in the network, which in some cases shared overlapping websites, were hosted on the same server, or had other digital links, according to Reuters' reporting and Lesser's research. More: But her e-mails? Here is how Trump's team reacted to a Hillary Clinton security breach The four companies' websites are hosted at the same IP address alongside Smiao Intelligence, an internet services company whose website became unavailable during Reuters' reporting. Reuters could not determine the nature of the relationship between Smiao Intelligence and the four companies. The news agency's attempts to track down the four companies and Smiao Intelligence ran into numerous dead-ends including unanswered phone calls, phone numbers that no longer work, fake addresses, addresses that lead to empty fields, unanswered emails and deleted job listings from LinkedIn. More: Rats, card tables and BYO toilet paper: Inside federal workers' return to office Lesser, who uncovered the network and shared his research with Reuters ahead of publication, said the campaign follows "well-established" techniques used by previous Chinese intelligence operations. "What makes this activity significant," he said, "is that the network seeks to exploit the financial vulnerabilities of former federal workers affected by recent mass layoffs." Reuters could not determine if the companies are linked to the Chinese government or whether any former federal workers were recruited. Asked about the research, three intelligence analysts told Reuters the network appeared to be a prime example of how foreign-linked entities are trying to gather intelligence from staff fired or forced into retirement by President Donald Trump and billionaire tech tycoon Elon Musk's Department of Government Efficiency. More: Some federal workers report 'chaos' as federal return-to-office begins Once employed by the network, federal employees could then be asked to share increasingly sensitive information about government operations, or recommend additional people who might be targeted for willing or unwitting participation, the analysts said. A spokesperson for the Chinese Embassy in Washington told Reuters in an email that China was unaware of any of the entities allegedly involved in the campaign and Beijing respects data privacy and security. A White House spokesperson said China was constantly trying to exploit the United States' "free and open system" through espionage and coercion. "Both active and former government employees must recognize the danger these governments pose and the importance of safeguarding government information," the spokesperson said. Targeting former federal workers Trump denies report that Musk would be briefed on China war plans President Donald Trump denied a report that claimed Elon Musk would be shown China war plans during his Pentagon visit. CNN reported February 28 that U.S. intelligence believes Russia and China are targeting disgruntled U.S. government employees, something both countries have done for years. The companies in the network ‒ which posted job ads to Craigslist, LinkedIn and other job sites ‒ could be concrete evidence such operations are underway, Lesser said. Reuters reported earlier this month that some U.S. government workers with top security clearances were not given standard exit briefings which, in part, cover what to do if approached by foreign adversaries. More: Government agency to review health and safety effects of Trump's mass firings One of the companies in the network, RiverMerge Strategies, bills itself on its website as a "professional geopolitical risk consulting company" and posted two since-deleted job listings on its since-removed LinkedIn page in mid-February. One ad that sought a "Geopolitical Consulting Advisor" with experience with government agencies, international organizations, or multinational corporations, displayed that it had more than 200 applications, according to a screenshot of the LinkedIn post. The other sought a human resources specialist who could "utilize a deep understanding of the Washington talent pool to identify candidates with policy or consulting experience," and "leverage connections to local professional networks, think tanks, and academic institutions." Mysterious companies, disappeared websites The U.S. number for RiverMerge Strategies listed on the company's home page is no longer in service. A separate Chinese phone number, until recently listed on the website's contact page, is the same number listed by Shenzhen Si Xun Software Co., Ltd, an information technology company focused on online retail, commercial automation and catering, according to a Google translation of the company's website. Reuters could not determine the nature of the connection between the network of companies, Smiao Intelligence, and Shenzhen Si Xun Software Co., Ltd. Calls to a phone number listed on the company's website did not go through. Elon Musk swings chainsaw, gift from Argentina's Milei, on CPAC stage DOGE head Elon Musk wielded a blinged out chainsaw on the CPAC stage in Washington, D.C., a gift from Argentina's President Javier Melei. RiverMerge Strategies until recently listed two addresses on its website, one in Singapore and the other in Colorado. The Singapore address led to a hostel building within the campus of the Management Development Institute of Singapore, but the company could not be located during a Reuters visit. Its other address led to an address in Boulder, Colorado, tied to Northwest Registered Agent, a business services firm. A person listed on LinkedIn as an employee of RiverMerge, who spoke on condition of anonymity, told Reuters an acquaintance he met at a networking event in China reached out and asked him to help promote job listings for RiverMerge Strategies. More: Democrats grill Trump officials over potential leak of classified materials The acquaintance, who he knows as "Eric," as well as another contact, 'Will,' pays the employee $1,000 or $2,000 every two or three months to post the job listings, he said. A person identifying themselves as William Wells and RiverMerge's 'strategies project manager' responded to an initial Reuters email and asked about Reuters' request for information. Even though the Reuters email identified the sender as a reporter, Wells also inquired whether Reuters was seeking a job, and said they would review a resume and set up a short call. Another company in the network, Wavemax Innovation, placed an ad February 6 on Craigslist offering "Job Opportunities for Recently Laid-Off U.S. Government Employees." The ad, which has since expired, sought workers with backgrounds in project management, research, technology, communications, policy analysis and more. Defense Secretary Pete Hegseth denies texting war plans U.S. Secretary of Defense Pete Hegseth denies texting war plans to a journalist from The Atlantic. Reuters could not establish who saw the ad or whether anyone applied to Wavemax as a result. An email to the address posted in the ad was not returned. When Reuters visited the Singapore address posted to the company's website there was no sign of the company, just a vacant field. A search of Singapore's corporate registry for the company was equally barren. Asked how it verifies job listings, LinkedIn said it uses automated technologies and a team of reviewers to find and remove inauthentic activity and profiles. The spokesperson said on Tuesday. Similar deceptive tactics have been used before In response to questions about Reuters' findings, an FBI spokesperson warned that Chinese intelligence officers can represent themselves as think tanks, academic institutions and recruiting firms to target "current, former, and prospective" U.S. government employees. Agents for the Chinese government have used similar tactics in the past. In 2020 a Singaporean national named Jun Wei Yeo pleaded guilty in a U.S. federal court to acting as an agent of a foreign power, starting in 2015. Prosecutors alleged he worked to spot and assess Americans with access to non-public sensitive information and paid them to write reports for unnamed Asian clients, without disclosing the work was actually for the Chinese government. That operation relied on a fake consulting company and job advertisements, according to court records. Chinese intelligence operatives told Yeo how to recruit targets, including by asking them if they were "dissatisfied with work, were having financial troubles had children to support," according to court records. China's foreign ministry denied any knowledge of Yeo's case and accused the U.S. of repeatedly accusing Beijing of espionage, saying "it has reached a state of extreme suspicion," the South China Morning Post reported at the time. More: Timeline shows how journalist was inadvertently added to secret military group chat Foreign intelligence services often use job recruitment scams to recruit sources without them even knowing they are working for a foreign government, David Aaron, a former Department of Justice prosecutor now in private practice, told Reuters. 'I would expect China's intelligence services to dial those efforts up as they see a wave of government employees suddenly having to look for new jobs,' Aaron said, adding that while many former government employees are motivated by patriotism, some may be vulnerable to deceptive tactics.
Yahoo
25-03-2025
- Business
- Yahoo
Exclusive-Secretive Chinese network tries to lure fired federal workers, research shows
By AJ Vicens A network of companies operated by a secretive Chinese tech firm has been trying to recruit recently laid-off U.S. government workers, according to job ads and a researcher who uncovered the campaign. Max Lesser, a senior analyst on emerging threats with the Washington-based think tank Foundation for Defense of Democracies, said some companies placing recruitment ads were "part of a broader network of fake consulting and headhunting firms targeting former government employees and AI researchers." Little information is publicly available on the four consultancies and recruitment companies allegedly involved in the network, which in some cases shared overlapping websites, were hosted on the same server, or had other digital links, according to Reuters' reporting and Lesser's research. The four companies' websites are hosted at the same IP address alongside Smiao Intelligence, an internet services company whose website became unavailable during Reuters' reporting. Reuters could not determine the nature of the relationship between Smiao Intelligence and the four companies. The news agency's attempts to track down the four companies and Smiao Intelligence ran into numerous dead-ends including unanswered phone calls, phone numbers that no longer work, fake addresses, addresses that lead to empty fields, unanswered emails and deleted job listings from LinkedIn. Lesser, who uncovered the network and shared his research with Reuters ahead of publication, said the campaign follows "well-established" techniques used by previous Chinese intelligence operations. "What makes this activity significant," he said, "is that the network seeks to exploit the financial vulnerabilities of former federal workers affected by recent mass layoffs." Reuters could not determine if the companies are linked to the Chinese government or whether any former federal workers were recruited. Asked about the research, three intelligence analysts told Reuters the network appeared to be a prime example of how foreign-linked entities are trying to gather intelligence from staff fired or forced into retirement by President Donald Trump and billionaire tech tycoon Elon Musk's Department of Government Efficiency. Once employed by the network, federal employees could then be asked to share increasingly sensitive information about government operations, or recommend additional people who might be targeted for willing or unwitting participation, the analysts said. A spokesperson for the Chinese Embassy in Washington told Reuters in an email that China was unaware of any of the entities allegedly involved in the campaign and Beijing respects data privacy and security. A White House spokesperson said China was constantly trying to exploit the United States' "free and open system" through espionage and coercion. "Both active and former government employees must recognize the danger these governments pose and the importance of safeguarding government information," the spokesperson said. CNN reported February 28 that U.S. intelligence believes Russia and China are targeting disgruntled U.S. government employees, something both countries have done for years. The companies in the network - which posted job ads to Craigslist, LinkedIn and other job sites - could be concrete evidence such operations are underway, Lesser said. Reuters reported earlier this month that some U.S. government workers with top security clearances were not given standard exit briefings which, in part, cover what to do if approached by foreign adversaries. "GEOPOLITICAL RISK CONSULTING" One of the companies in the network, RiverMerge Strategies, bills itself on its website as a "professional geopolitical risk consulting company" and posted two since-deleted job listings on its since-removed LinkedIn page in mid-February. One ad that sought a "Geopolitical Consulting Advisor" with experience with government agencies, international organizations, or multinational corporations, displayed that it had more than 200 applications, according to a screenshot of the LinkedIn post. The other sought a human resources specialist who could "utilize a deep understanding of the Washington talent pool to identify candidates with policy or consulting experience," and "leverage connections to local professional networks, think tanks, and academic institutions." The U.S. number for RiverMerge Strategies listed on the company's home page is no longer in service. A separate Chinese phone number, until recently listed on the website's contact page, is the same number listed by Shenzhen Si Xun Software Co., Ltd, an information technology company focused on online retail, commercial automation and catering, according to a Google translation of the company's website. Reuters could not determine the nature of the connection between the network of companies, Smiao Intelligence, and Shenzhen Si Xun Software Co., Ltd. Calls to a phone number listed on the company's website did not go through. RiverMerge Strategies until recently listed two addresses on its website, one in Singapore and the other in Colorado. The Singapore address led to a hostel building within the campus of the Management Development Institute of Singapore, but the company could not be located during a Reuters visit. Its other address led to an address in Boulder, Colorado, tied to Northwest Registered Agent, a business services firm. A person listed on LinkedIn as an employee of RiverMerge, who spoke on condition of anonymity, told Reuters an acquaintance he met at a networking event in China reached out and asked him to help promote job listings for RiverMerge Strategies. The acquaintance, who he knows as "Eric," as well as another contact, 'Will,' pays the employee $1,000 or $2,000 every two or three months to post the job listings, he said. A person identifying themselves as William Wells and RiverMerge's 'strategies project manager' responded to an initial Reuters email and asked about Reuters' request for information. Even though the Reuters email identified the sender as a reporter, Wells also inquired whether Reuters was seeking a job, and said they would review a resume and set up a short call. Another company in the network, Wavemax Innovation, placed an ad February 6 on Craigslist offering "Job Opportunities for Recently Laid-Off U.S. Government Employees." The ad, which has since expired, sought workers with backgrounds in project management, research, technology, communications, policy analysis and more. Reuters could not establish who saw the ad or whether anyone applied to Wavemax as a result. An email to the address posted in the ad was not returned. When Reuters visited the Singapore address posted to the company's website there was no sign of the company, just a vacant field. A search of Singapore's corporate registry for the company was equally barren. Asked how it verifies job listings, LinkedIn said it uses automated technologies and a team of reviewers to find and remove inauthentic activity and profiles. The spokesperson said on Tuesday RiverMerge Strategies' profile had been restricted. In response to questions about Reuters' findings, an FBI spokesperson warned that Chinese intelligence officers can represent themselves as think tanks, academic institutions and recruiting firms to target "current, former, and prospective" U.S. government employees. Agents for the Chinese government have used similar tactics in the past. In 2020 a Singaporean national named Jun Wei Yeo pleaded guilty in a U.S. federal court to acting as an agent of a foreign power, starting in 2015. Prosecutors alleged he worked to spot and assess Americans with access to non-public sensitive information and paid them to write reports for unnamed Asian clients, without disclosing the work was actually for the Chinese government. That operation relied on a fake consulting company and job advertisements, according to court records. Chinese intelligence operatives told Yeo how to recruit targets, including by asking them if they were "dissatisfied with work, were having financial troubles [or] had children to support," according to court records. China's foreign ministry denied any knowledge of Yeo's case and accused the U.S. of repeatedly accusing Beijing of espionage, saying "it has reached a state of extreme suspicion," the South China Morning Post reported at the time. Foreign intelligence services often use job recruitment scams to recruit sources without them even knowing they are working for a foreign government, David Aaron, a former Department of Justice prosecutor now in private practice, told Reuters. 'I would expect China's intelligence services to dial those efforts up as they see a wave of government employees suddenly having to look for new jobs,' Aaron said, adding that while many former government employees are motivated by patriotism, some may be vulnerable to deceptive tactics.
