FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
FBI raids laptop farms in Texas, arrests two U.S. nationals in operation targeting North Korean IT workers.
Intelligence analysis by Qwen 2.5 (3B)
FBI operation targets North Korean IT workers using stolen or fabricated identities to appear U.S.-based, resulting in arrests and seizures of laptops.
FBI found out about North Korean workers pretending to be in the U.S. and using fake IDs to get jobs. They arrested two people and took away 187 laptops they used to pretend to work.
Analysis
{"heading_1":"Background on North Korean IT Worker Schemes","content_1":"Famous Chollima (also known as WageMole) is a North Korean threat actor associated with fraudulent IT-worker schemes that generate revenue for the DPRK regime. These schemes involve technology jobs at companies worldwide, often using stolen, rented, or fabricated identities.","content_2":"CrowdStrike researchers have been tracking DPRK IT workers since April 2025, noting that they use various methods to send company-issued laptops to the "}
Key points
- FBI raids laptop farms in Texas targeting North Korean IT workers
- Two U.S. nationals arrested for their involvement in IT-worker schemes
- 187 laptops and KVM devices seized in the operation
- North Korean IT workers use various methods to send company-issued laptops to the
- Operation Lonestar Roundup is part of a broader U.S. law enforcement effort to dismantle the threat group
This operation may help reduce the number of IT-worker schemes and improve cybersecurity in the U.S.
North Korean IT workers might find new ways to continue their schemes, and the operation might not have a lasting impact.
