FBI disrupts North Korean “laptop farm” network used to infiltrate U.S. companies

The FBI and the U.S. Department of Justice have conducted a major crackdown on “laptop farms” used by North Korean IT workers to infiltrate American companies. Through an operation known as “Operation Lonestar Roundup,” authorities searched over 40 locations in Texas between September 21 and 25, seizing approximately 187 laptops and various electronic control devices.

Prosecutors allege that North Korean operatives used stolen or forged identities to secure remote positions at more than 70 U.S. companies. These schemes, identified by cybersecurity firm CrowdStrike as the “Famous Chollima” network, reportedly generated approximately $3 million in revenue, which is believed to have been funneled to sanctioned North Korean entities to fund nuclear weapons development.

Local accomplices in the U.S. facilitated the fraud by receiving company equipment at their residences, setting up remote access software, and transferring salaries to North Korean-controlled accounts. As a result of the investigation, 14 individuals have been indicted, including two U.S. citizens. The FBI warned that thousands of North Korean remote workers continue to attempt to bypass security by using VPNs, proxies, and even hiring intermediaries to participate in video interviews.