Nextgov FBI Disrupts North Korean Laptop Farms Funding Nuclear Programs
Article Content
- •FBI seized 187 laptops from over 40 locations in Texas linked to North Korean operatives.
- •North Korean IT workers used false identities to infiltrate U.S. companies and fund nuclear programs.
- •The operation revealed a network affecting more than 70 U.S. businesses across multiple sectors.
The FBI conducted Operation Lone Star Roundup, raiding over 40 locations in Texas and seizing 187 laptops linked to a North Korean scheme to infiltrate U.S. companies. The operation revealed that North Korean IT workers, using false identities, were able to secure remote jobs with U.S. firms, allowing them to funnel 85% to 90% of their earnings to the North Korean government. The investigation, supported by CrowdStrike, identified a network that targeted more than 70 companies across various sectors, including aerospace and defense. U.S. facilitators were found to be configuring the devices and transferring payments to North Korean accounts. The operation also included two arrests in Ohio, although details of those arrests remain undisclosed. Authorities emphasized that U.S. individuals hosting multiple laptops could not claim ignorance of the illicit activities. The broader implications of this operation highlight ongoing concerns regarding North Korea's use of fraudulent IT employment to fund its weapons programs.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Common questions
What companies were targeted?
What actions should companies take?
Are any arrests confirmed?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…