FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
-
The U.S. Department of Justice has disrupted the Famous Chollima threat group's operations, arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops tied to North Korean remote IT worker schemes. The raids targeted laptop farms in Texas, where U.S. nationals were arrested for allegedly facilitating the infrastructure that let DPRK operatives pose as legitimate remote employees.
These operations typically involve North Korean IT workers infiltrating Western companies under false identities, often using stolen credentials and proxy networks to appear as domestic hires. The seized laptops were reportedly used to route traffic and maintain persistent access to employer systems, generating revenue for the regime while potentially enabling espionage or extortion.
- Arrests: 2 suspects taken into custody
- Charges: 14 individuals charged
- Seizures: Nearly 187 laptops confiscated
- Location: Laptop farms raided in Texas
- Group: Famous Chollima (DPRK-linked)
Mitigation for organizations includes stricter identity verification during hiring, monitoring for unusual remote access patterns, and auditing device compliance for contractor and remote staff.
Source: BleepingComputer
Does your organization have controls in place to detect fraudulent remote IT workers, or is this a gap you are still addressing?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login