FBI and CrowdStrike Dismantle 40+ North Korean Laptop Farms in Texas
Federal investigators and the cybersecurity firm seized nearly 200 devices and indicted 12 people in a push to cut off a major revenue stream funding Pyongyang's weapons programs.
What to know
- The FBI and CrowdStrike dismantled over 40 laptop farms across Texas used by North Korea to hire remote IT workers under stolen American identities, seizing nearly 200 devices.
- Justice Department indicted 2 U.S. nationals and 10 China-based North Koreans for defrauding 70 companies of $3+ million between 2019 and 2025 through identity theft.
- U.S. officials identify the IT worker scheme as a primary funding source for North Korea's nuclear and ballistic weapons programs, alongside cryptocurrency theft.
- CrowdStrike reports identifying an average of two new North Korean laptop farm cases per day in September, indicating the operation remains widespread and difficult to fully quantify.
“The North Korean IT worker scheme is among the most serious ongoing digital threats facing businesses today and that it remains underappreciated as a risk.”
U.S. officials and cybersecurity analysts, Government and security experts · Boston Globe ↗
FBI Lead federal investigatorCrowdStrike Cybersecurity firm partner
Brett Leatherman Head of FBI cyber divisionAdam Meyers Counteradversary operations lead at CrowdStrikeU.S. Justice Department Prosecuting authority
How it unfolded 2 developments, newest first · click a bar or a number to jump articlesposts
-
2
CrowdStrike confirms partnership in disruption effort
CrowdStrike publicly confirmed its partnership with the FBI in identifying and disrupting the laptop farms, noting the operations targeted what the cybersecurity firm calls FAMOUS CHOLLIMA, North Korea's IT worker operation.
“CrowdStrike is proud to have partnered with the FBI in identifying and disrupting U.S.-based laptop farms used by FAMOUS CHOLLIMA to infiltrate organizations, conceal operatives' identities, and generate revenue for the...”
— @crowdstrike -
first by NewsNation, 1d ago · also WFAA, Tom's Hardware, Defense One, Cyber Security News, iTnews, The Record +10
12 more headlines
- 'We intend to indict': FBI seizes 187 devices in Texas crackdown on North Korean 'laptop farms' WFAA · 1d ago
- FBI shuts down over 40 North Korean laptop farms used by fake remote workers — over 200 devices seized in Texas, although no arrests were made so far Tom's Hardware · 1d ago
- FBI disrupts North Korean 'laptop farms' used to fund weapons programs Defense One · 1d ago
- FBI Disrupts North Korean Famous Chollima Laptop Farms Used to Infiltrate U.S. Companies Cyber Security News · 1d ago
- US raids 40 laptop farms for North Korean IT workers iTnews · 1d ago
- Two arrested as DOJ takes down laptop farms responsible for $3 million in North Korean revenue The Record · 1d ago
- FBI disrupts North Korean ‘laptop farm’ used to infiltrate US companies Nextgov/FCW · 1d ago
- The FBI says it worked with CrowdStrike to dismantle 40+ laptop farms across Texas used to help North Koreans get remote US tech jobs under stolen identities New York Times · 1d ago
- DOJ arrests two, seizes 187 devices in North Korean laptop farm crackdown in Texas Reuters · 1d ago
- US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms SecurityWeek · 20h ago
- FBI shuts down over 40 North Korean laptop farms used by fake remote workers Tom's Hardware · 16h ago
- U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud Mastodon · 5m ago
-
first by BleepingComputer, 1d ago · also Gizmodo, Dallas Express, Metacurity, Help Net Security, FOX 4 News Dallas-Fort Worth
5 more headlines
- FBI Raids Over 40 Texas Homes, Charges Americans in North Korean ‘Laptop Farm’ Scheme Gizmodo · 1d ago
- FBI: Texas ‘Laptop Farms’ Turned American Paychecks Into Cash For North Korea's Nukes Dallas Express · 1d ago
- FBI uproots over 40 of North Korea's US laptop farms Metacurity · 1d ago
- FBI raids 40+ laptop farms helping North Korea pocket US tech salaries Help Net Security · 1d ago
- FBI raids Texas ‘laptop farms’ helping North Korea fund nuclear weapons FOX 4 News Dallas-Fort Worth · 1d ago
-
B
The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group's operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. https://www. bleepingcomputer.com/news/secu rity/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/
2 more of the top 3 · 4 posts in this stretch
-
A major step forward in disrupting North Korea's illicit IT worker operations. CrowdStrike is proud to have partnered with the FBI in identifying and disrupting U.S.-based laptop farms used by FAMOUS CHOLLIMA to infiltrate organizations, conceal operatives' identities, and generate revenue for the...
-
H
The homes of over 40 residents in Texas were raided as part of an FBI investigation into an alleged North Korean “laptop farm.” https://www. houstonpublicmedia.org/article s/news/2026/10/14/564376/fbi-raids-north-texas-homes-for-alleged-role-in-north-korean-laptop-farm-operation/
-
-
1
FBI and CrowdStrike announce disruption publicly
Federal authorities and CrowdStrike publicly announced the operation targeting what officials describe as a primary method of funding North Korea's weapons program alongside cryptocurrency theft. Brett Leatherman, head of the FBI's cyber division, stated the coordination exemplifies the bureau's new cyber strategy emphasizing private-sector collaboration.
“Every one of these jobs is funding a stream for a nuclear and ballistic missiles program obtained with the stolen identity of an American and the trust of an American employer.”
— Brett Leatherman -
first by Boston Globe, 1d ago · also NYT
1 more headline
- F.B.I. Disrupts Pyongyang Revenue Stream: North Koreans in U.S. Tech Jobs The New York Times · 1d ago
-
-
background
Justice Department unseals indictments against North Korean IT scheme participants — Prosecutors in Ohio unsealed indictments against two U.S. nationals and 10 China-based North Koreans accused of using stolen identities to earn paychecks from unwitting U.S. companies. The scheme bilked 70 companies out of more than $3 million and ran from 2019 to 2025, with identities of two additional defendants remaining sealed.
-
background
FBI disrupts North Korean laptop farm network in Texas — The FBI conducted an operation dismantling more than 40 so-called laptop farms across Texas and seizing nearly 200 computer devices used by North Korean operatives to obtain remote IT jobs under stolen American identities.
What people are saying 1 voices from 1 site · best of 4 · verbatim
- Oct 13
-
New: The FBI last month worked w/ CrowdStrike to disrupt a network of over 40 American laptop farms in Texas believed to be aiding North Korea in securing remote IT jobs that helped fund the reclusive country's nuclear and ballistic weapons programs, U.S. officials said Tuesday.