# North Korean IT worker infiltration schemes

> Live situation record from CLSTR: https://clstr.news/situations/north-korean-it-worker-infiltration-schemes
> Updated: 2026-10-22T19:41:14.000Z. Sources: 4. Developments: 2.

U.S. authorities, including the FBI and Department of Justice, conducted “Operation Lonestar Roundup” to disrupt North Korean “laptop farms” used to infiltrate American companies. Between September 21 and 25, investigators searched over 40 locations in Texas, seizing approximately 187 laptops and electronic control devices. Prosecutors allege that North Korean operatives used stolen or forged identities to secure remote positions at more than 70 U.S. companies, generating roughly $3 million to fund sanctioned North Korean nuclear weapons development.

Local accomplices facilitated these schemes by receiving company equipment and transferring salaries to North Korean-controlled accounts. The investigation led to indictments against 14 individuals, including two U.S. citizens.

The scope of the activity appears to be global. In South Korea, police are investigating the first known case of North Korean IT personnel concealing their identities to work for private domestic enterprises. International alerts regarding these identity theft and cyber espionage tactics have been issued to several countries, including the U.S., Japan, the UK, and Australia.

## Timeline

### 2026-10-22: North Korean IT operatives infiltrate global companies using stolen identities

North Korean IT workers are using stolen identities and domestic laptop farms to secure remote jobs globally, generating millions to fund weapons programs and risking corporate espionage.

2 sources. https://clstr.news/cluster/north-korean-it-operatives-infiltrate-global-companies-using-stolen-identities

### 2026-10-20: FBI disrupts North Korean “laptop farm” network used to infiltrate U.S. companies

The FBI disrupted a North Korean scheme using “laptop farms” in the U.S. to infiltrate 70+ companies, generating $3 million for North Korea's weapons programs through identity theft and remote work fraud.

2 sources. https://clstr.news/cluster/fbi-disrupts-north-korean-laptop-farm-network-used-to-infiltrate-us-companies

---
Cite as: North Korean IT worker infiltration schemes. CLSTR, https://clstr.news/situations/north-korean-it-worker-infiltration-schemes
