Foreign spies are using social media and professional networking sites to connect with Australians who have access to sensitive information, such as people working in government, the defence industry or in academia.
The Australian Security Intelligence Organisation (ASIO) is taking steps to identify those who are trying to recruit Australians with access to sensitive information in order to get them to commit acts of espionage or foreign interference.
The ASIO’s think before you link campaign is primarily aimed at Australians with access to sensitive information, but the ASIO states that all Australians should “be mindful of what personal information you choose to post online. You could be targeted for information that, if shared, could have serious consequences for Australia’s security, its economy or your business.”
Who is being targeted?
Foreign spies are targeting those who:
- Identify as an employee of the Australian Government.
- Identify as working in the private sector or academia with access to classified or commercially sensitive technology or research, either directly or indirectly (such as the defence industry).
- Mention that they have a security clearance.
How do spies target Australians?
The approaches are often sophisticated, with spies pretending to be head hunters or people offering enticing business opportunities. However, their real intent is to learn your secrets and recruit you as a source.
The spy may:
- Initially engage you online, presenting a “unique business offer” or “employment opportunity”.
- Ask for further information about you and request your CV.
- Attempt to move you away from the initial website or communication platform.
- Set up phone calls or face-to-face discussions.
- Invite you to another country to meet a representative.
How to identify a threat
Common signs that the person approaching you is not genuine include:
- The offer is too good to be true.
- There is a lack of depth or detail about the “opportunity”.
- The person tries to flatter you.
- The person tries to create a sense of urgency.
- You are invited to a foreign country.
Personal vulnerabilities which could be exploited include high workload and distractions, recent job or life changes (for example, unemployment or retirement), and your desire to be respected and rewarded.
How to avoid making yourself a target
You can avoid making yourself a target by:
- Not advertising your security clearance publicly online.
- Not revealing details of sensitive job roles or employers publicly or to unknown contacts.
- Thinking about the lowest level of detail that you really need to include on your profile.
- Using website settings to manage the information you put out about yourself, and to control who can view your profile.
- Sharing CVs or details of specific projects only with trusted and verified contacts.
Responsible online behaviour
The ASIO is not telling people to stop using social media and professional networking sites, but is asking people to be aware of the risks, to think about what they are putting online, and take action if they suspect they are being targeted.
It is important to be cautious about connecting with unknown profiles online. Potential consequences of engaging with malicious actors can be serious (for example, loss of security clearance, funding or intellectual property).
How to report suspicious activities
If you suspect that you are being targeted by a foreign spy, the ASIO advises to disengage from the profile and not interact any further.
If you’re a current or former clearance holder, or you have access to sensitive information such as commercial information or research, the ASIO advice is to contact your agency’s or company’s security manager or adviser to report any suspected malicious profiles or activities.
If you don’t have a suitable security contact, you can report directly to the ASIO via the Notifiable Incidents, Threats or Reportable Observations (NITRO) portal.
When submitting a report, the ASIO asks you to include:
- The URL of the profile (if you were approached through a website).
- A copy of the email or a screenshot of the message or request you were sent.
- A brief explanation of why you think the approach is suspicious.
- Any other relevant details.
Key takeaways
Foreign spies are targeting Australians who have access to sensitive information to recruit them and get them to commit acts of espionage or foreign interference. It is important to be aware of the threat, the common warning signs, and how to minimise the risk of being targeted online, to avoid adverse impact to you, your organisation, or to Australia’s national security.
