Threat Intelligence China-linked actors using job sites to target government workers, Five Eyes warns June 4, 2026 Share By SC Staff (Adobe Stock) Per HackRead, Western intelligence agencies, including the Five Eyes alliance, have issued a joint warning about the increasing use of professional networking and job search websites by China-linked state actors to gather sensitive information from government employees and military personnel. The intelligence agencies, comprising the UK, US, Canada, Australia, and New Zealand, detailed a sophisticated espionage campaign. Threat actors create fake profiles on platforms like LinkedIn, Indeed, and Upwork, posing as recruiters or consultants. They post advertisements for roles such as defense or foreign policy analysts. Applicants are then vetted through online interviews, with spies concealing their true identities. Selected candidates are asked to complete test reports on sensitive topics, and the conversation is moved to encrypted messaging apps. The actors pressure applicants to divulge non-public information, even seemingly minor details that can be pieced together to aid Chinese intelligence. Payments ranging from several hundred to thousands of dollars are made via PayPal, Wise, or cryptocurrency. Targets include individuals with security clearances, particularly in the military and Indo-Pacific region, but also academics, journalists, and writers connected to government or trade sectors. This tactic has been observed previously, with reports of Chinese agents using similar methods to target politicians and individuals in the UK. The UK government has stated it will confront these hostile actions while maintaining political dialogue with China, emphasizing that sharing classified information can lead to imprisonment under espionage laws. Source: HackRead SC Staff Related Threat Intelligence Underground forum tutorial simplifies vulnerability exploitation for novice hackers SC Staff June 4, 2026 The tutorial, authored by a hacker known as "Hercules" and documented by cybersecurity company Flare, breaks down the process of scanning, detecting, exploiting, and monetizing vulnerabilities into actionable steps. Threat Intelligence U.S. sanctions Iran’s largest crypto exchange Nobitex for facilitating terrorism financing SC Staff June 4, 2026 Nobitex is accused of processing over 50% of Iranian digital asset inflows in 2025 and enabling transactions connected to the Islamic Revolutionary Guard Corps (IRGC), including those associated with IRGC-linked ransomware actors. Threat Intelligence Russia FSB claims foreign intelligence used malware on officials’ phones SC Staff June 3, 2026 The FSB stated that the operation exploited the capabilities of unspecified "major international IT corporations" to extract sensitive information from targeted devices. Related Events Cybercast Better Threat Intelligence Between Public and Private Sectors On-Demand Event Virtual Conference Nationwide Cybersecurity Summit 2025: Safeguarding America’s Digital Future On-Demand Event Virtual Conference Securing the Future of Finance: Strategies to Counter Modern Cyber Threats On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms DNS Spoofing Deauthentication Attack Defacement Denial of Service Dictionary Attack Distributed Scans Domain Hijacking DumpSec Dumpster Diving Google Hacking You can skip this ad in 5 seconds