Adversary Intelligence — 2026-10-29

Hoover Institution Report Details How Chinese Intelligence Uses Think Tanks and Consultancies as Cover

BLUFChinese intelligence use of freelance platforms and fabricated consultancies to recruit Western policy experts will outpace current institutional screening measures, exposing former officials and analysts to incremental compromise.

Martin Purbrick of the Centre for State Threats writes that a June 3 Five Eyes advisory, "Safeguarding Our Secrets," warned that Chinese military intelligence officers posed as employees of "private businesses or think tanks" on LinkedIn, Indeed, and Upwork, asking targets for "trial reports" on China's external relations, defence, or trade 12. Hoover Institution summarizes Purbrick's finding that PRC services also work through genuine universities and think tanks 3. Purbrick cites a June 10 Justice Department announcement that, with the FBI, it disabled 13 domains allegedly used to run over a dozen fake consulting firms soliciting classified US information 12. He also cites a 2017 case in which a Shanghai Academy of Social Sciences cover identity approached former CIA officer Kevin Mallory, who was later convicted and sentenced to 20 years 12. He describes China Institutes of Contemporary International Relations as alleged to be the 11th Bureau of the Ministry of State Security 12.

Analysis
Chinese services are shifting recruitment toward remote, platform-based approaches that security officers at think tanks, consultancies and freelance marketplaces will struggle to screen. The advisory, the domain seizures and the Mallory case show one sequence: a professional approach, a low-stakes "trial report," then escalating tasking and paid travel. Former officials and policy analysts doing consulting work are most exposed, since cover ranges from invented firms to real institutions, and the alleged Ministry of State Security link to the China Institutes of Contemporary International Relations makes research exchanges with such bodies a collection risk. Confidence is low: this rests on one analyst's open-source compilation, repeated across three outlets, with no corroboration of the affiliations and no primary documents reviewed. The pattern may instead be ordinary commercial solicitation that US counterintelligence now frames as state tradecraft.

3 sources

Research as Cover: How Chinese Intelligence Uses Think Tanks and Consultancies - Centre for State Threats (Substack)
Research as Cover: How Chinese Intelligence Uses Think Tanks and Consultancies - Asia Crime Century (Substack)
Research as Cover: How Chinese Intelligence Uses Think Tanks and Consultancies - Hoover Institution