At a glance.
- Fake headhunting firms linked to China target former US Federal workers.
- Malicious npm packages infect locally installed legitimate packages.
- New ransomware gang claims credit for attack on telecom provider.
Fake headhunting firms linked to China target former US Federal workers.
Reuters reports that a secretive Chinese tech company is using several fake consulting and headhunting firms to target recently laid-off US government workers and AI researchers. It's unclear if the company is tied to the Chinese government, but Reuters notes that the activity aligns with techniques used by previous Chinese intelligence operations.
Reuters cites intelligence analysts who explained that, "[o]nce employed by the network, federal employees could then be asked to share increasingly sensitive information about government operations, or recommend additional people who might be targeted for willing or unwitting participation." One of the phony job postings, for example, seeks an HR specialist who can "utilize a deep understanding of the Washington talent pool to identify candidates with policy or consulting experience," and "leverage connections to local professional networks, think tanks, and academic institutions."
A spokesperson for the Chinese Embassy in Washington told Reuters that China was unaware of any of the entities mentioned. A White House spokesperson said in a statement, "Both active and former government employees must recognize the danger these governments pose and the importance of safeguarding government information."