Loading summary
David
For exclusive interviews, bonus episodes, ad free listening, early access to series first look at live show tickets, a weekly newsletter and discounted books. Join the declassified club@therealisclassified.com this podcast is.
Sponsor/Ad Voice
Brought to you by Carvana. Carvana makes car selling fast and easy from start to finish. Enter your license plate or VIN and get a real offer in seconds, down to the penny. If you accept, Carvana will come pick up your car from your drive, or you can drop it off at one of our car vending machines. Either way, you get paid instantly. It's fast, transparent and 100% online car selling that saves your time. That's Carvana.
David
Carvana.
Sponsor/Ad Voice
Pickup fees may apply. This episode is brought to you by Ebay Buying a car should feel secure, start to finish. That's why you should buy your next ride on ebay. Whatever you're into, ebay's got it. From classics to SUVs and trucks to imports, all in one place. And with Secure Purchase, the process is streamlined and protected. Secure Purchase means no DMV visit. Sellers and titles are verified, all the paperwork is handled and financing, delivery and insurance options are built right in. Plus, eligible vehicle purchases are backed by up to $100,000 in protection. Looking to sell your ride? Secure Purchase makes that easy too. Your buyer and their funds are verified and the title transfer and loan payoff are totally seamless. So skip the hassle. Shop with confidence. Buy your next car on ebay. Ebay Things People love Secure Purchase is powered by Caramel Dealer Services LLC, an eBay subsidiary. You're deep into your favorite true crime. The twists, the theories and suddenly hunger hits. Grab a Paleo Valley 100% grass fed beef Stick. These aren't your average gas station snacks. They're made from real beef, sourced from regenerative small American family. No preservatives, no gluten, no grains, soy or sugar. Just naturally fermented protein that fuels your obsession. Whether you're road tripping, hiking or pulling an all nighter with your favorite case, choose from 5 Bold Flavors Original Jalapeno Summer Sausage, Garlic Summer sausage and Teriyaki. They're keto, Paleo and Carnivore. Friendly, made to work with your lifestyle, not against it. With over 55 million sticks sold and a 60 day money back guarantee, you've got nothing to lose. Get 15% on your first order@paleovalley.com just use code Paleo at checkout.
David
Gordon, you've given me no no shoddy LinkedIn messages to read to start this episode. Sorry, but LinkedIn is really the answer to this question of how in the world would China's intelligence services find and eventually recruit a former CIA officer. And the answer is going to involve again, LinkedIn. And last time, in our sort of first episode on how China spies, we talked about LinkedIn, read that very memorable piece of prose from Shirley Shen, a global headhunter who was reaching out to all manner of people across the UK. And we talked a lot about how LinkedIn is used to approach people who were working in and sort of around the UK parliament. LinkedIn was being used by Chinese intelligence officers. It's kind of this digital platform that allows you to start a relationship with someone and then follow that through to a more traditional in person recruitment. And so today we are going to, I guess, walk through a kind of case study of how a spy service can use an online platform to find someone, begin a relationship with them, and then convert, I think, that relationship into a more traditional, you know, sort of human intelligence operation.
Gordon
Yeah, that's right. So last time we looked mainly at parliaments, but we did leave our listeners with a Cliffhanger of In 2017, Kevin Mallory in Virginia getting a message from a Chinese headhunter, not that dissimilar from the ones that those people in the UK Parliament got. Let's dive a bit deeper into what happened because Kevin Mallory, just to explain who he was, he graduated from Brigham Young University in 1981 with a BA in Political Science.
David
Institution affiliated with the Church of Latter Day Saints, the more Mormon Church.
Gordon
The Mormons.
David
For the Mormons. That's right. That's right. And there's a lot of Mormons who end up working at the CIA. Gordon.
Gordon
Interesting. I didn't know that.
David
Yeah.
Gordon
Initially, after graduation, Mallory's going to work as an active duty military officer until 1986. Then he joins the State Department's Diplomatic Security Service as a special agent for three years, 1987-90. Then he joins the CIA and he's going to work as a case officer and he becomes a China specialist, learns to speak fluent Mandarin. He's stationed in China, Taiwan, and also does a posting in Iraq. Then in the early 2000s, he shifts across to the Defense Intelligence Agency. I don't know how often is that the case? I mean, that seems. Is it? I'd have thought you see it as a demotion, David, to go from CIA to dia. I don't know if that's true, though.
David
Yes, I have a very snobby attitude toward my, my DIA analytic composure. Who I see, I see as definitely below the Talents and capabilities.
Gordon
Of course you do. So we just lost all of our DIA listeners. You've just insulted them in one fell swoop.
David
I'm looking. I'm looking forward to hate mail that I will receive because I relish it. I relish conflict with the Defense Intelligence Agency.
Gordon
Okay, great.
David
That's right.
Gordon
Better you to me.
David
So just to make clear, that is.
Gordon
In the McCloskey view, not the care of you, but while in DIA, Mallory's responsibilities include serving as the handling case officer for covert human assets, who referred to in the kind of legal case around him as the Johnsons, as the pseudonym for them, which is anyway, interesting pseudonym. But then interesting enough, he returns to the CIA as a contractor, 2010 to 2012, but then seems to lose his top secret clearance in October 2012 when he leaves government service. Some reports that, you know, for improperly disclosing classified information. Bit murky, but he's on his own. And he sets up his own consulting firm called Global X llc. And this is where the trouble starts.
David
All these former, like, case officers who start consultancies, they all have a name that is as anodyne as Global X. Global L, that is. That is classic. Well, so. And his troubles start, as you might assume, given our banter up front of this episode on LinkedIn. Isn't that right, Gordon? Because, yeah, he's contacted. Valerie's contacted on LinkedIn by someone who presents himself as a. As a, Essentially a recruiter, a headhunter who kind of dangles possible consulting work in China.
Gordon
Yeah. And they have some mutual connections on LinkedIn. And of course, it comes at a moment for Mallory, who is having trouble. He's missed at least two mortgage payments. He owes more than $200,000 on his mortgage. He's got $30,000 in credit card debt. And here's an opportunity. So this recruiter over LinkedIn arranges for Mallory to then contact someone else. This is the kind of chain we're talking about. Contacts a man identified as Michael Yang, who purportedly worked for a Chinese think tank in Shanghai, the sass. Now, Yang, the US Authorities say, is a spy, and that the Shanghai State Security Bureau, which is part of the Ministry of State Security. We talked last time about this kind of giant organization and which has lots of regional bureaus. Well, this is the Shanghai State Security Bureau. And the claim by the FBI is that the State Security Bureau has a close relationship with this think tank sass, and uses it and its employees as spotters and assessors, which I guess means people who are trying to, you know, look out for interesting candidates, doesn't it?
David
Yeah. And we talked last time, you know, a little bit about some of the. The challenges that Chinese espionage presents and the ways in which it's a little bit unique, you know, and we. We should not mirror image the way that, you know, the CIA or, you know, SIS think about espionage, conduct espionage onto the Chinese. And I think this is a great example of how China is able to sort of use a variety of actors for intelligence purposes that I think, frankly, maybe in particular the States, it's kind of hard to do because you think about the equivalent here in the States of like, having an intelligence officer who has cover at a think tank. I mean, it would be like, you know, a researcher at Brookings in D.C. who's actually a CIA case officer. You know, that kind of COVID could be really effective. It's not used. We. The CIA doesn't do that. So. But the Chinese, they use it all the time, so they've got a lot more flexibility, I think, in how they cover their officers. And in this case, it makes it seem, even though Mallory, I think, kind of knows what's going on, that's just my sense. There's enough cover here that he could maybe convince himself that it's all above board. Ish.
Gordon
That's important. I agree, because I think he can tell himself, well, it's just a think tank. People can slightly kid themselves, maybe this guy's not a spy. Maybe he really is a great business opportunity. And so Mallory is then going to have a video call with Yang. And we talked about video calls last time, and Yang says he's looking for a foreign policy expert to write some reports, do some consulting. Mallory's handwritten notes from that call indicate that there was an interest in, amongst other things, anti ballistic missile defense systems. So something quite sensitive, but not. This isn't give us some secret documents. It's just, you know, can you write some reports? But then, crucially, March 2017, Mallory travels over to China to meet Yang in person. And this, again, is something we talked about last time, isn't it? You start with LinkedIn, then you have a video call, and then they say, come to China to talk to us. They want to do the actual recruiting in person still. They don't think they can run it all online. So it's this kind of blended digital and human operation. Then it's interesting. In advance of the trip, though, Mallory asks Yang to provide him with a cell phone when he arrives, specifying that Yang should put it in an envelope, initial around the Seals, tape over the initials and put that envelope in another envelope to make sure it's not been tampered with. Hmm.
David
Those are always my instructions to goal hanger when I arrive in the uk, Gordon. For my cell phone. My UK cell phone. I want it. It should be. There should be seven envelopes that should all. All have the initials of Becky, our producer. I shouldn't have said your last name, Becky. I would probably have to edit that out. You'll have to bleep that out.
Gordon
Yeah, but, yeah, she gets contacted by Chinese intelligence.
David
Exactly, Exactly.
Gordon
And also, the day before Mallory leaves for China, he goes to a FedEx store in Washington, D.C. purchases an SD memory card and scans some documents on it. Nine pages. So he goes to Shanghai. Soon after, Mallory sends Yang an email with some documents. Nine pages of documents. He says they're examples, but they're not classified documents, we should say. They include, like, military intelligence acronyms. There's a document with the CIA seal on it, you know, the logo. But these are not classified documents yet.
David
The document that's got the CIA seal on it described analytic tradecraft standards, apparently, which I think that stuff, I mean, that's like, you know, the nuclear codes. I mean, if the Chinese. The Chinese get to the bottom of our analytic tradecraft standards, we're doomed. But I guess it's an effort to demonstrate value. Exactly.
Gordon
So he meets on this trip to Shanghai for several hours with Yang and a man who's introduced as Yang's supervisor, Mr. Ding. But Mallory then comes back home, goes back to China again the next month, April 2017, to meet with Yang. And on this trip, Yang gives Mallory. And this is going to be important, a Samsung Galaxy Note 4 smartphone, which had been customized so that Mallory could send encrypted communications to a corresponding phone kept by Yang. And he's taught how to use it. I mean, now it's pretty obvious we're into the spy world, isn't it? There's no point hiding it. When you're. When you're given a covert communications device, what you call it cofcom, then you know. You know you're in the spy game, basically. But then this is. This is where it starts to get a little bit crazy, because he comes back from his second trip to China, April 21, 2017, and Mallory, at Chicago Airport, is stopped by Customs and Border Protection agents. Now, I don't know, it may have been a normal search. There may have been a tip off, I don't know. But it's interesting. Mallory says he's returning from Business and a vacation kind of combined trip to Shanghai. He said he met someone who he knew through his church and that he was doing some consulting with this person on anti bullying family safety development.
David
That is an obscure piece of like obscure alibi. That is, it is maybe too specific.
Gordon
Yeah, it's a little weird, isn't it?
David
That is very weird.
Gordon
And he also says that this phone he's been given, this Samsung phone, is actually a new phone he purchased for his wife as a gift. But crucially he's checked no. So in these, you know, I hated these customs declaration forms. They always scared me because there's so many kind of things you have to tick. Like, you know, when you go into the US when you, it's always like, are you carrying, you know, X amount of cash? Have you ever committed terrorism? Are you involved in, you know, Genesis was like a kind of weird checklist. You always think if mad if I.
David
Check, are you, are you carrying a, are you carrying a bag of soil from where you came from? You know, things like that. It's kind of weird animals bringing animals and food back. Yeah, they don't have those anymore.
Gordon
No, no, no, They've changed it, haven't they, in recent years. But he ticks no whether he's carrying over $10,000 in cash. But they find $16,500 in cash in his two carry on bags. And the customs agents later say Mallory looks really kind of agitated or aggravated during this. But then he's actually looks incredibly relieved when he's told that he's going to be able to get away with it but just has to pay some duty, I think on the, the items he'd purchased in China, I guess like the phone and stuff like that. So this is a kind of interesting incident and we'll come back to it because then a few days after his return, he visits a FedEx store close to his home in Virginia, pays to have a FedEx clerk scan some more documents, 47 pages of documents onto an SD memory card and then shred the documents again, slightly suspicious. And then starting in May, he's going to use this covert communications device, this Samsung smartphone, to transmit to Yang some of the nine documents that he'd scanned at the FedEx store. And they're described, you know, they've got different names, handwritten kind of title of contents, claiming that there were kind of science and technology targeting opportunities, particularly targeting in China. And there's a typed page entitled White paper which supposedly contained classified information and two pages of handwritten notes from a yellow Pad and supposedly this was a proposed defence intelligence operation, DIA operation involving these agents, the Johnsons, including information about that intelligence relationship. And it was all kind of notes from a PowerPoint that Mallory had used during a presentation to DIA supervisors back in his time at the DIA to do some kind of. We obviously don't know the details for obvious reasons, but some, some kind of unique sensitive targeting in China that he was privy to from his time as dia. And that's what he's kind of apparently now sending over.
David
And so is he writing up his recollections of this for the handling officer, or is. Does he actually have documents that he's taken out with him and is now passing to the Chinese?
Gordon
I think in some cases it looks like it. It was his notes of sensitive PowerPoints and documentation. So it is secret material or top secret material, but not necessarily top secret documents. The documents seem to be about capabilities of foreign intelligence services. And I mean, they were certainly whatever he was sending contained information classified at top secret level. You know, whether it was original documents or not, that's a bit unclear. And the text messages indicate Yang acknowledges receiving some of the documents and then asks for more. Your object is to gain information, you know, my object is to be paid for, Mallory tells Yang. And Yang, or whoever this kind of real contact is, says, you know, my object is to make sure of your security, try and reimburse you so you can see, you know, what's going on here. Mallory's also going to kind of place more classified material he'd obtained on another SD card, wraps it in tinfoil, stashes it in his bedroom closet. But this is, I think this is where it's interesting because this is where it starts to go, because he does seem to suddenly panic about what he's doing. He seems to kind of freak out. And possibly because of that custom stop, I kind of wonder what, I mean, a, it may have been just a genuine custom stop. You wonder if it was a kind of tip off custom stop. You also wonder if he over interprets the custom stop and thinks, they're onto me, I'm in trouble now, I'm doomed, you know, what am I doing? Because at that point he behaves in a pretty odd way, doesn't he?
David
It's kind of bizarre because he does midstream in this relationship with Yang and the mss, he reaches out to sort of an acquaintance who had worked with him at the CIA to get Mallory in touch with the CIA, right, to tell the agency that he'd been approached by Chinese Intelligence on this business trip. And he kind of wants. It seems like Mallory wants to get this on the record, which, you know, is maybe the exact opposite of what you should do in this situation. Cause he seems like he's almost gonna try to spin it, like he's being useful to the Agency in some way.
Gordon
Yeah, I kind of wonder if either he's scared and he thinks I'm gonna get caught, I better go to them first, or if he's thinking he can play a kind of clever double game. Because I wonder if what he's thinking is if I tell them I've been pitched by Chinese Intelligence, but not tell them I've actually started passing stuff, maybe I'll either get away with it, or they might use me as a double agent back against the Chinese, but I'll probably get away with it. But he's thinking I can just pretend all that's happened is I've been pitched by the Chinese and I've had some contact with them, but kind of claim that there's nothing more to the relationship than that. But I agree, it's odd. It's a. Kind of. Feels like a person who's panicking. You know, there's a good piece by Tara McKelvey, who is an old colleague at the BBC and a really good reporter, and she suggests in the piece she wrote about this that, you know, Mallory was hoping to become a double agent, but his messages, you know, he's sending text messages to old acquaintances, you know, linked to the CIA, and they're getting increasingly frantic. And so on May 12, 2017, he meets with a CIA investigator. And he now kind of goes, oh, I think these people I met in Shanghai were linked to Chinese intelligence. And I received a covert communications device and instructions how to. To use it. And he says he'll come to another meeting. And then comes the kind of crucial meeting, and this is a kind of wild meeting. May 24, 2017. Thinks he's going to meet the CIA investigator again, but this time it's the Phoebes. David, the Phoebes are there.
David
That's. This is a bad sign. This is a bad sign. There's. Phoebe's there.
Gordon
Yeah, they're there waiting for him. And Mallory says he's been contacted on social media by a Chinese recruiter. He's traveled out twice. He says that, and he says he's been paid $25,000 in total, which he says was in line with his billable rate as a consultant, including expenses. I mean, wow, that's $25,000 for that's pretty good money for, I don't know, whatever consultancy he was doing on anti bullying or whatever it was.
David
It was something. Yes, yes. Family development and anti bullying. This is the going rate for this kind of.
Gordon
We're in the wrong game, David. We're in the wrong game.
David
Yeah, we are, we are. We need to respond to those messages from Shirley Shen.
Gordon
Just hold the recording a minute. Let me go back. So Mallory says he was encouraged to pursue employment with the US government in a position with access, which he said he was in the process of doing. He tells the thieves he received taskings to write papers about U.S. policy. And he responded, he says, by writing and delivering too short. What he says are unclassified, what he calls white papers, using information in his head as well as open source information. And he says, I didn't retain copies of, you know, of this, I just sent it over.
David
Well, why would you retain any copies of work that you.
Gordon
Of the work you've done when it's open source, you know. Yeah, but then, of course, crucially, he tells the thieves multiple times he didn't provide the Chinese with any other documents in any format, paper, electronic, beyond these two papers. Now, this is the funny bit. He's going to show the COVID communications device that Samsung phoned the FBI agents and describe how it works. And this is where things really do go wrong for Kevin Mallory.
David
I think, Gordon, maybe that's a good place to take a break. Right when this guy Kevin Mallory is thinking that the solution to all of his problems is to show the Phoebes the covcom device that he has been using to communicate with the Chinese. Let's take a break. When we come back, we will see how in the world that wonderful idea goes terribly wrong. This episode is brought to you by Attio, the CRM for the AI era.
Gordon
Now, David, people think that spycraft is just car chases and secret codes, but an awful lot of it is just idling around waiting for the action.
David
It's a bit like starting your own business. You think it's going to be as easy as creating and selling a product. But the reality is business owners spend far too long trying to get their CRM to fit a system not built for them.
Gordon
Attio's AI driven CRM enables you to take control of your platform, to build something from the ground up that fits your needs.
David
James Bond had Q's, X ray shades, an explosive watch and a pen grenade. Business owners have Adeo's real time customer insights and platform that grows with them. All tools relevant for Your mission? To build a company from the ground up.
Gordon
Attio even has something called agent collaboration.
David
Yes, but in this case, that means giving people the ability to let AI work seamlessly in the background for them.
Gordon
Try Attio for free@attio.com trick.
David
This episode is brought to you by NordVPN.
Gordon
We tend to imagine bad actors in clandestine meetings, picking locks or planting bugging devices. However, these days, much of the world's malicious activity really occurs online.
David
And unfortunately. Unfortunately, anybody with a bad WI fi connection is now an open target for someone spying on their data. Cyber espionage agents don't need disguises or gadgets to infiltrate your life, just an unprotected device.
Gordon
But David, thankfully NORDVPN encrypts your data and your data and its Threat Protection Pro blocks malicious links and scans downloads for up to 10 devices or your whole house. When installed with your router or your router.
David
NORDVPN also protects your wallet. Some online retailers change their prices depending on your location. But with NordVPN, you can do your Christmas shopping safely, knowing that you are not being targeted by algorithmic pricing.
Gordon
So to get the best discount off your NordVPN plan, go to nordvpn.com restisclassified and our link will also give you four extra months on the two year plan. There's no risk with Nord's 30 day money back guarantee. The link is in the podcast episode description box.
Sponsor/Ad Voice
Close your eyes. Exhale. Feel your body relax and let go of whatever you're carrying today. Well, I'm letting go of the worry that I wouldn't get my new contacts in time for this class. I got them delivered free from 1-800-contacts. Oh my gosh, they're so fast. And breathe. Oh, sorry. I almost couldn't breathe when I saw the discount they gave me on my first order. Oh, sorry. Namaste. Visit 1-800-contacts.com today to save on your first order.
Gordon
1-800-Contacts.
Sponsor/Ad Voice
Toast the holidays in a new way and raise a glass of Rumchata, a delicious creamy blend of horchata with rum. Enjoy it over ice or in your coffee. Rumchata. Your holiday cocktails just got sweeter. Tap or click the banner for more. Drink responsibly. Caribbean rum with real dairy cream. Natural and artificial flavor alcohol 13.75% by volume, 27.5 proof. Copyright 2025, Agave Loco Brands, Pojoaquee, Wisconsin. All rights reserved.
David
Well, welcome back, Kevin. Mallory Gordon is sitting with the Phoebes looking at his Samsung Galaxy smartphone communication device. And I guess it's about to all go sideways for him, isn't it?
Gordon
Yeah. Some poor Kevin Mallory. I am almost feeling sorry for him for this moment. He sat with the Phoebes and he's saying, here's this covert communications device that my Chinese handlers gave to me. I've never used it. He says, I've never used it to send classified documents to Yang, my handler. I'd only ever sent a test message. And I'm pretty sure that, you know, the device is designed to delete all the previous history. So he voluntarily agrees to show the agents and how to shift on the phone from the normal message mode to a kind of clandestine, secure messaging mode on the phone. And then he appears very visibly surprised, according to people who were there, when the whole chat history with Yang turns up, including what he thought were the secure messages that he'd exchanged and which he claimed. He's just claimed he never had because he only sent a test message and he's showing them how to use it, and then suddenly the whole messaging history pops up, including references to foreign intelligence services and to documents. And he just. He just goes silent for a few moments. I mean, how bad is that? And it looks like the software had a glitch possibly, and just revealed the messages by mistake. I mean, how bad is that?
David
It's comedically bad, almost. I mean, I really think that he almost had. It was like his conscience was. Was overactive in a way, and he felt like he needed to come clean in. In some way, shape or form. And now he's sort of. He's attempted to kind of come clean, and then the phone. The phone wrecks him. Gordon. I mean, it's just. It's remarkable.
Gordon
He's come cleaner than he wanted to. He wanted to come semi clean. Now he's been cleaned out by the phone.
David
He's been cleaned out. That's right.
Gordon
Because the messages say things like, I can also come in the middle of June. I can bring the remainder of the documents I have at that time.
David
Fairly incriminating. Yeah, yeah.
Gordon
And he's kind of saying, well, this is just the two white papers I'd already told you about. You know, open source stuff. The remainder of the documents. That's just me stringing the Chinese along. And according to one of the FBI agents who was present, it was a fairly significant moment. Like the understatement, as we realized there was something very different going on here than we first thought. I mean, it does sound like Thebes maybe didn't realize until he did that, that he had actually been passing the documents. They really thought he was just owning up. And suddenly they're like, oh, this is a very different case. So it's bad. And then he's going to kind of give them the phone and allow them to make a copy of the phone, which is going to allow them to find even more messaging history in it in which he's talking about the documents he sent, which is, you know, even more incriminating because there's more details about messages about money going into accounts funds being broken into four equal payments over four consecutive days. When you get the okay to place the payment, then I'll send more docs. In the future, I will destroy all electronic records after you confirm receipt. I've already destroyed the paper records. I cannot keep these around. Too dangerous.
David
Yeah, that's bad.
Gordon
That's really bad.
David
That's really incriminating. Yeah. Yeah. And I guess when the Phoebes actually look at the phone, they see that there's a handwritten index which has sort of a description of a number of different documents. And I mean, it's really. This is kind of, you know, the jigs up for Kevin Mallory.
Gordon
Yeah, the game's over. It's pretty clear that he's been using the device to send these documents. So then, June 22, 2017, the FBI arrest him at the house. Interesting enough, there's a red banner covered in Chinese calligraphy that hung outside the front door. His poor teenage son is at home. And the FBI, I mean, when they do this, they go in, I mean, hard, don't they? Because there are guns, helicopters, black vans. It's the. The full FBI works, basically, that it's used.
David
I think they just enjoy doing it. That's my theory.
Gordon
Do you think they particularly enjoy doing it to a CIA officer or a former CIA officer?
David
I bet you kind of 100%. Yeah. This is. This is fun. This is. This is like an FBI carnival right here. You know, this is.
Gordon
Everyone's going like, let me do the raid. Let me do the raid.
David
Yeah, it also, I mean, this. One of the pieces of this story that is also just. I mean, it's like, what was Mallory thinking is he's, he's doing a lot of the document scanning and destruction in full view of cameras inside the FedEx store in Leesburg. Right. It's just he's. He's on camera doing this stuff, which enables the FBI to then use that as evidence at the trial.
Gordon
Yeah, that's right, because they've got. They've got him scanning classified material onto the SD card and as we said, kind of getting the stuff shredded at the store all on camera, and then they're going to find the concealed SD card, you know, the one he'd said to hide during a search of his home. And so in the trial, they're going to be able to show all this evidence, including a recording from after he's arrested a couple of days after, where he can be heard on a call from the jail asking his family to search for the hidden SD card. I mean, amateur out. I mean, you know, it's pretty bad, isn't it? Anyway, it's no comment on the quality of people employed by the CIA in the 1990s, but it's kind of.
David
It sounds. Well, the way you just said that, Gordon, makes it sound like it's a, it's a comment on the people who.
Gordon
All our CIA listeners come after. Me, I don't mean that, but I think he was the, he was the rotten apple. And as befitting a Rotten Apple, in May 2019, he's sentenced to 20 years under the Espionage Act. So he gets the full whack of the law for doing that. And it all started, you know, with a LinkedIn message. And I guess he's not the only one, is he? I mean, we shouldn't pretend that he's the only case. You know, there's plenty of others.
David
No, and I, and I think we will, down the line, want to do a few more series on kind of industrial and commercial espionage too. I mean, in this case, you know, this is more of a straight up, just, you're recruiting a former CIA officer who's got political, national security information that you might want. But in, in so many other cases, the targets are, are very, are very different.
Gordon
You're right. I mean, it is interesting because the, the way in both the Parliament Alert and the Mallory case, it starts off with this offer of kind of consultancy and writing reports. And it is, that's what LinkedIn is, is there for, is for connecting people to kind of be able to ping in a pitch work to each other. So, you know, the platform which, you know, we should say LinkedIn is, you know, says it's working with governments to try and deal with this, has offered a new way of doing something that intelligence services have been using for some time. So it's not a uniquely Chinese thing, I think, to try and build relationships that way through that kind of COVID And I mean, China's Ministry of State Security, not often we're going to quote them, but you Know, they say that west does this to them. So January 2024, the MSS posted on WeChat, which is the Chinese messaging kind of Service, alleging that MI6 had established contact in 2015 with a. A foreigner in charge of an unnamed overseas consultancy. And they recruited this guy from a third country without being clear, and then used this person in China to kind of gather intelligence and to recruit more people and train them. And so the MSS was basically making the point, hey, everyone does this. So there is a sense in which using this process is something that intelligence agencies do, the kind of consultancy as cover to try and lure people into a relationship which then builds. So I guess the question is, is what China does different?
David
Absolutely, it's different. I've never liked this. We spy, they spy, everybody spies. Anytime a Chinese intelligence case is sort of unearths Kevin Mallory or whatever, right? You sort of get this reaction that, okay, well, this is part of the game, right? Everybody spies. I think that statement is. It's true. And at its heart, though, it's completely misleading because of, I guess, a couple things. The scale is totally different. It's totally different. We talked about this, I mean, throughout both of these episodes. That the Chinese can throw so many resources at this point that it's not. It's not fair, quote, unquote. It's not the same. It's happening.
Gordon
They're bigger than us.
David
At a very different level. They're bigger than us. I think that the targets. I mean. But the second thing is, is like, we. We talked in this series about more typical intelligence targets. You know.
Gordon
Yeah.
David
Political types try to get into, allegedly into Parliament in the uk. The reality, though, is that the Chinese look at sort of security competition, I think, across every possible domain. Right? Scientific, commercial, economic, political, cultural. This is not how I think the CIA and SIS would sort of view the spy game with China. Right. It's a much more narrow set of targets. And then the last point is just like, again, the strategies that the Chinese employees to steal ip to capture networks of elites in the west, like these are not strategies, I think, that are widely deployed at scale by Western intelligence services. So I think it's like this everybody spies thing is just. It's ignoring the reality that the Chinese are spying differently and at a greater scale than everyone else.
Gordon
Let me come back to you a little bit because I agree that actually China is different in the way it spies. You know, I think they go after different targets. They do economic espionage in a way we don't. They do, I think, political interference In a way that we don't. There's a bit, though, of me which goes, why do we get to decide what's acceptable spying and what's not? You know what, who gets to set the boundaries of why some things are. Because basically, recruiting a Kevin Mallory, that is exactly what I think the Brits or the CIA would do to a MSS officer, an ex MSS officer if they could get it. Kind of political intelligence, counterintelligence, military intelligence, using consulting cover to try and get them. That case, I think, is actually very hard to go. Hey, you know, you can't do that. It's a bit like saying China's going to use an embassy to spy. Well, shock horror. We might do similar things, you know, who'd have thought? So there's certain types of intelligence which I think we do the same. There's definitely another category which China does, which we don't do. I think that is true, and I agree with you there. And they do it at a scale and with impact that we don't do. I think there's an interesting question, is who sets the rules in espionage? Who gets to decide what's allowed and what's not allowed? And I think it's right that we complain about it. I think, particularly for me, the kind of political interference, I think that feels a big deal. The economic espionage. I agree. I think we should be complaining about it. Don't get me wrong. Think it's right that it happens. It's quite interesting from a moral perspective to decide where the boundaries are. But I definitely think we should. We should be calling it out at the very least.
David
Well, sure, I guess. I'm not saying that I think it's even unfair. I don't think fair has anything to do with it. I just mean that when, when these Chinese spy cases come out and you hear the inevitable refrain that, well, everybody's spies, you know, it's just sort of.
Gordon
It's too simple.
David
It's too simple and it's, it's analytically misleading about the nature of the problem. That's my. That's, that's my concern. So it's, it's missing the, the differences. It's missing the differences. And. Yeah, and it makes it harder for us to then deal with the problem because we just say, oh, you know, it's just everybody spies, and it's assuming the game is the same when in fact there are vectors, threat vectors, that the Chinese intelligence services use to gain access to the information, the resources and the people in our societies. And we're not defending ourselves properly against them if we don't analytically look at it in sort of a clear headed way. That's my no.
Gordon
And, and I agree with you very much that we need to be clear headed about it and we need to be able, and this goes back to some of the discussion we had earlier to call it out and to be open about it and to say this is what they do this to our, whether it's parliament or businesses. This is what you need to look out for because this is what they're trying to do to us. I think we absolutely need to be kind of clear headed about that. And I do, you know, I think the scale point is really interesting because I think, you know, the reality is they don't have to choose are we just going to do political intelligence or are we going to do economic intelligence? They could do everything at vast scale enabled by digital technology and having whatever 600,000 people, maybe even more in their kind of security and intelligence services compared, you know, if you're in MI5 with the FBI and you're kind of looking at that scale that you see incoming, that has a kind of strategic effect on your, whatever you think of the morality of it on your economy and your political life. If they can do it at that scale and, and you don't necessarily have the resources and the ability to defend it against it. That is a kind of strategic risk for, for Western countries I think if they're not alert to it and it's a pretty hard one to defend against. I agree.
David
I'm glad you said that Gordon, because I was nervous that you were drifting into your classic sort of, your chummy approach of, of sort of anti Western actors like you did in our Snowden series where you sort of, you know, Gordon, the swan song, the swan song of this, you know, this sort of anti Western axis is. It's appealing to Gordon Ferreira.
Gordon
I think it's possible to care about civil liberties, David, and human rights and be critical of Chinese espionage and Russian espionage. That's all. That's, that's, it's not either or. That's what I would say. In fact it should be. And anyway, that's a, that's a, that's. You've opened up a big one there.
David
That's right, that's right at the very end. I also think, I mean, you know, there is a, there, there is a, a great. And you know, Becky our, our producer has typed into the chat here, you know, do you think we would ever spy like this? And I think the answer, and this is something we haven't really talked much about in the series but is really actually an important piece of the way that enabler of the way China spies is in part because it has a very closed political system and it is not an open society. And so when you think about the ways that Chinese intelligence agencies, state owned enterprises, et cetera, can get access to our ip, can become investors in US or Western companies, can target for acquisition companies that are in bankruptcy and can get access to sort of politicians and elite networks all over the west. The way you do that is because we have a very open system and it's, it's, it's not reciprocal. So like if we tried to do the same things back, we would have no, we would have no purchase, right? Yeah, exactly. So yeah, it's just, it's out of the question.
Gordon
I think that's a challenge for us.
David
It is, it's a structural challenge that you just can't I think do much about at scale.
Gordon
Yeah. So if we have one message though from, from this two part series, I think it's think before you link when you get that request. Think carefully, however, however tempting it may seem for that consultancy deal. I think just think twice, isn't it? David?
David
If you're being paid $25,000 for anti anti bullying consulting, you might, then you.
Gordon
Might, something else might be going on.
Sponsor/Ad Voice
The Uniswap wallet makes crypto easier and safer to own and use. Discover new tokens, research confidently swap instantly and manage it all securely in one place. The Uniswap trading protocol has powered over $3 trillion in volume and it's trusted by millions worldwide. Buy your first crypto assets in a few taps and experience the freedom of decentralized finance with uniswap. Tap the banner to get started.
Gordon
Yeah.
David
For the Chinese Ministry of State Security. Well, this has been a fun little journey into the world of Chinese espionage. We hope you have enjoyed it. Do go ahead and go to theresdisclassified.com and join the declassified club. We should also say, Gordon, we'd be remiss if we didn't yet again mention that we are doing a live show.
Gordon
Isn't that we are doing a live show. So if you want to hear more about Edward Snowden, hero or villain are differing perspectives on that and some other issues we may, we may find cause to disagree, disagree agreeably or agree disagreeably. Anyway, disagreeably.
David
We're going to agree disagreeably. Yeah, exactly.
Gordon
No, no, alive on stage.
David
We are going to disagree disagreeably on stage.
Gordon
Are we?
David
Yeah, it'll be. It's going to be an extended struggle session between me and Gordon Carrera.
Gordon
This could be the first and last live show that we ever do, so you better come.
David
That's right.
Gordon
That's the 31st of January at the south bank, so do get tickets. Only a few left. So do sign up if you want to come, but otherwise we'll see you next time.
David
We'll see you next time.
Release Date: December 3, 2025
Hosts: David McCloskey (former CIA analyst, spy novelist), Gordon Corera (security correspondent)
This episode continues the exploration of how modern espionage, particularly by Chinese intelligence services, leverages digital platforms like LinkedIn to target and recruit Western officials. Through the real-life story of former CIA officer Kevin Mallory, hosts David and Gordon dissect how online approaches can evolve into full-scale spy operations, the distinctiveness of Chinese intelligence tradecraft, and the broader implications for Western societies.
LinkedIn’s Role: Hosts revisit how Chinese intelligence services use LinkedIn to identify and initiate contact with potential assets, blending digital outreach with traditional human intelligence methods.
Case Study Introduction: The focus is on Kevin Mallory, a former CIA officer recruited via LinkedIn, illustrating the process from digital approach to in-person recruitment.
"LinkedIn was being used by Chinese intelligence officers. It's kind of this digital platform that allows you to start a relationship with someone and then follow that through to a more traditional in person recruitment."
— David [02:47]
Professional Background: Mallory’s trajectory from BYU graduate, U.S. military, Diplomatic Security Service, CIA case officer (China specialist, fluent Mandarin), to Defense Intelligence Agency (DIA), then back to the CIA as a contractor.
Financial Trouble: At the time of the Chinese approach, Mallory was struggling financially, making him vulnerable.
Consultancy Setup: After losing his clearance in 2012, Mallory started a consultancy, "Global X LLC"—a classic move for ex-intel officers, according to David.
"All these former...case officers who start consultancies, they all have a name that is as anodyne as Global X."
— David [06:46]
Initial Approach: Reached on LinkedIn by a supposed 'headhunter' offering consulting in China; referred to "Michael Yang" of a Shanghai think tank (actually an MSS front).
Cover Stories & Doubt: Plausible deniability in using think tanks as fronts aids recruitment by muddying lines between legitimate and illicit motives.
Escalation:
Alibi Construction: On his return to the U.S., Mallory gave a suspiciously specific, implausible reason for his trip: consulting work on "anti-bullying, family safety development."
"That is an obscure piece of...alibi. That is, it is maybe too specific."
— David [13:37]
Suspicious Actions: Scanning/shredding documents at FedEx, possession of undeclared cash, and receiving payments from Yang.
"He seems like he's almost gonna try to spin it, like he's being useful to the Agency in some way."
— David [18:12]
Discovery: While demonstrating the "secure" messaging mode to FBI agents (the "Phoebes"), the entire incriminating chat history reappears.
"He appears very visibly surprised...when the whole chat history with Yang turns up, including what he thought were the secure messages..."
— Gordon [26:21]
Incriminating Content: Discussions about bringing further documents, payment arrangements, destruction of evidence.
"In the future, I will destroy all electronic records after you confirm receipt. I've already destroyed the paper records. I cannot keep these around. Too dangerous."
— Gordon [29:33]
Additional Evidence: FedEx surveillance, hidden SD card at home, recorded jail calls asking to find said card.
"He's doing a lot of the document scanning and destruction in full view of cameras inside the FedEx store..."
— David [30:39]
Not Just the U.S.: Similar recruitment tactics (consulting offers) seen in Parliament/industrial espionage.
Chinese Perspective: Even MSS claims MI6 uses similar tactics, illustrating the universal nature of certain spy methods.
Scale and Strategy: Both hosts discuss how Chinese espionage is different—not just in method, but in scale and target scope (covering not only government but economic, commercial, technological, and cultural domains).
"The scale is totally different. It's totally different...the Chinese can throw so many resources at this point...It's not the same."
— David [34:10]
Rules and Morality: Who defines "acceptable" espionage? Western services would do similar to Chinese officials, but China's industrial/economic focus and the sheer scale makes it distinct.
Structural Challenge: China’s closed system vs. the West’s open societies constraints reciprocity and intensifies asymmetries in intelligence-gathering potential.
On LinkedIn’s Dangers:
"If you're being paid $25,000 for anti anti bullying consulting, you might, then you...might, something else might be going on."
— David [42:27]
On Tradecraft Fumbles:
"He wanted to come semi clean. Now he's been cleaned out by the phone."
— Gordon [28:08]
On the “Everybody Spies” Argument:
"It's true. And at its heart, though, it's completely misleading because of, I guess, a couple things. The scale is totally different...the Chinese are spying differently and at a greater scale than everyone else."
— David [34:10]
On Open vs. Closed Societies:
"When you think about the ways that Chinese intelligence agencies, state owned enterprises...can get access to our ip...all over the west. The way you do that is because we have a very open system and it's, it's, it's not reciprocal."
— David [41:00]
Advice for Professionals:
"If we have one message from this two part series, I think it's: think before you link when you get that request. Think carefully, however tempting it may seem."
— Gordon [42:10]
This episode effectively illustrates how the seemingly innocuous world of professional networking can be weaponized for espionage, with LinkedIn serving as a gateway for intelligence services like China’s MSS. Through the episode-long case study of Kevin Mallory, David and Gordon bring to life the mechanics of recruitment, tradecraft blunders, and the consequences of complacency or naivety. The conversation moves from individual culpability and procedural missteps to the macro-level challenges Western societies face in countering state-backed human intelligence operations in the digital age. The episode’s tone is witty, sharp, and full of inside banter—making a serious subject both chilling and darkly entertaining. The ultimate takeaway: vigilance and skepticism are essential in an era where a LinkedIn message can be the first step down a slippery, dangerous slope.