DOJ seizes 187 laptops, charges 14 in North Korean IT worker scheme raid
The Department of Justice disrupted operations tied to Famous Chollima, a North Korean threat group, arresting two suspects and charging 14 individuals. The FBI's 'Lonestar Roundup' operation searched 40 Texas residences between September 21-25, seizing about 187 laptops and KVM devices used to run so-called laptop farms that let North Korean IT workers appear to be based in the US.
GoKawiil's interpretation of the reporting above, not reported fact.
These schemes let North Korea evade sanctions by funneling salaries from Western tech jobs to the regime, sometimes while also exposing employer networks to data theft or malware. CrowdStrike, which has tracked the group since April 2025, suggests public exposure is already pushing operatives toward more evasive tactics like spoofing device identifiers, meaning law enforcement actions like this one may only have limited lasting impact.
- DOJ charged 14 people and arrested two in a crackdown on North Korean IT worker fraud
- FBI's Lonestar Roundup raided 40 Texas addresses, seizing 187 laptops and KVM devices
- CrowdStrike warns operatives are adapting by spoofing identifiers to evade detection
YubiKey 5 NFC Security Key — This story highlights how fraudulent remote-worker schemes exploit weak identity verification to infiltrate companies. A hardware security key like the YubiKey 5 NFC adds strong phishing-resistant authentication, making it much harder for bad actors to hijack accounts or impersonate legitimate employees. It's a practical step any organization or remote worker can take to tighten access security.
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-10-14
Published there as: “FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.