<![CDATA[FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested]]>The U.S. Department of Justice has disrupted the Famous Chollima threat group's operations, arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops tied to North Korean remote IT worker schemes. The raids targeted laptop farms in Texas, where U.S. nationals were arrested for allegedly facilitating the infrastructure that let DPRK operatives pose as legitimate remote employees.

These operations typically involve North Korean IT workers infiltrating Western companies under false identities, often using stolen credentials and proxy networks to appear as domestic hires. The seized laptops were reportedly used to route traffic and maintain persistent access to employer systems, generating revenue for the regime while potentially enabling espionage or extortion.

  • Arrests: 2 suspects taken into custody
  • Charges: 14 individuals charged
  • Seizures: Nearly 187 laptops confiscated
  • Location: Laptop farms raided in Texas
  • Group: Famous Chollima (DPRK-linked)

Mitigation for organizations includes stricter identity verification during hiring, monitoring for unusual remote access patterns, and auditing device compliance for contractor and remote staff.

Source: BleepingComputer

Does your organization have controls in place to detect fraudulent remote IT workers, or is this a gap you are still addressing?

]]>https://xploitlk.com/topic/688/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrestedRSS for NodeTue, 27 Oct 2026 07:51:40 GMTWed, 14 Oct 2026 20:30:23 GMT60