U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud

The U.S. Department of Justice has charged 14 individuals and dismantled over 40 laptop farms linked to a North Korean IT worker fraud scheme known as Famous Chollima, purpledelta, and Wagemole. The operation involved North Korean IT workers using fake identities to obtain remote jobs at more than 70 U.S. companies, funneling salaries back to the DPRK to fund its nuclear and military programs. Facilitators in the U.S., including two arrested nationals, hosted company-issued laptops and laundered funds, while the threat actors used social engineering, identity theft, and laptop redirection tactics to evade detection. The FBI warns of escalating tactics, including subcontracting work to freelancers in South Asia and West Africa, and using threats of violence to coerce cooperation.

AI-extracted · verify before operational use