[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [INTERNATIONAL]

2 clusters · 21 sources · 6 days · First seen · Last updated

North Korean IT worker fraud network investigation

Overview

U.S. federal authorities conducted raids across more than 40 locations in North Texas as part of ‘Operation Lone Star Roundup’ to dismantle a fraudulent IT worker network linked to North Korea. During the operation, agents seized approximately 187 laptops and electronic devices used to operate ‘laptop farms.’

These farms enabled North Korean operatives to pose as legitimate U.S.-based remote employees by using stolen or fabricated identities and virtual private networks. This scheme reportedly impacted over 70 American companies and compromised the identities of at least 25 Americans.

Two Americans, Michael James Bostelle and Juan Cecilio Pena Carrillo, were arrested and charged with wire fraud, money laundering, and identity theft. Additionally, ten individuals in China were indicted for directing the operation. Authorities estimate the scheme generated at least $3 million, which was allegedly funneled to the North Korean government to finance its nuclear and ballistic weapons programs.

Entities

FBI · Department of Justice · Federal Bureau of Investigation · U.S. Department of Justice · Kash Patel

Timeline

  1. [INTERNATIONAL] 2 sources
    U.S. authorities raid North Korean laptop farms in Texas

    Federal agents raided over 40 locations in North Texas, seizing nearly 190 laptops allegedly used by North Korean operatives to pose as U.S. remote workers and fund nuclear and missile programs.

  2. [INTERNATIONAL] 19 sources
    U.S. authorities dismantle North Korean IT worker fraud network

    U.S. authorities dismantled a North Korean IT fraud network, seizing 187 devices from Texas 'laptop farms' and charging 14 people for helping workers use stolen identities to fund North Korea's weapons programs

Sources

arabnews.pk · astig.ph · CT24.cz · cybernoz.com · fox4news.com · gigazine.net · it-boltwise.de · itpro.com · jnilbo.com · joseilbo.com · koreaherald.com · news.az · pjmedia.com · seoul.co.kr · sgtreport.com · socialnews.xyz · teknoblog.com · thehackernews.com · thelocalreport.in · therecord.media · wattsupwiththat.com