North Korean IT Workers Used Stolen US Identities to Earn $3 Million
FBI raided Texas laptop farms as DOJ charged US facilitators of North Korean IT workers who earned $3 million from over 70 companies.
74
Threat actor
Famous Chollima
- Mentions · 7d0
- Mentions · 30d7
- All mentions12
- First seenAug 11, 2026
- Last mentioned13d ago
Timeline
12 articles · newest firstFBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
FBI raided Texas laptop farms, arrested two Americans, and charged people tied to DPRK IT-worker schemes.
74
U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
U.S. prosecutors charged 14 people and seized laptop farms used in a North Korean remote IT-worker fraud scheme.
76
FBI raids 40+ laptop farms helping North Korea pocket US tech salaries
FBI arrested two Americans and raided 40-plus laptop farms aiding North Korean IT-worker salary fraud.
76
DOJ charges 14 over a sprawling North Korean remote work scheme
DOJ charged 14 people for a North Korean remote-IT scheme that drew about $3 million from 70 U.S. employers.
74
Your AI agent is only as safe as the packages it downloads
Op-ed says AI agent escapes and malicious packages all moved through the software supply chain.
72
ChainDrop and PolinRider Use Blockchain C2 to Steal Cloud and CI/CD Credentials
ChainDrop and North Korea-linked PolinRider use blockchain C2 to steal cloud and CI/CD credentials.
78
North Korea’s Lazarus Operates Through Six Distinct Cyber Clusters
Sekoia and Kudelski Security reclassify North Korea's Lazarus umbrella into six clusters spanning espionage, financial theft, and fake IT worker operations.
75
North Korea-linked IT Workers Are Getting Hired Inside Western Companies
Huntress documented five DPRK-linked FAMOUS CHOLLIMA workers hired by Western companies in 2026 using fake identities, proxies and laptop farms.
55
North Korean Job Fraud Expands Beyond IT Into Healthcare and Sales
North Korea's IT worker scheme (Famous Chollima/PurpleDelta) has expanded from IT into healthcare, sales, and financial services roles worldwide.
65
Insights into Suspected DPRK Workers
Huntress details incidents involving suspected DPRK remote workers (Famous Chollima) in partner environments and shares detection indicators.
58
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers
Security researchers hired three suspected North Korean IT workers at a fake DeFi startup, documenting forged IDs, AI-edited images and post-hire system access.
55
Appears with
- CrowdStrikeorganization · 6
- FBIorganization · 4
- Huntressvendor · 3
- Wagemolethreat actor · 3
- U.S. Department of Justiceorganization · 3
- CrowdStrikevendor · 2
- Lazarus Groupthreat actor · 2
- purpledeltathreat actor · 2
- PiKVMproduct · 2
- US Department of Justiceorganization · 2
- DEF CONorganization · 1
- npmvendor · 1
- TEMP.Hermitthreat actor · 1
- BlueField-4product · 1
- Hugging Facevictim · 1
- AstrillVPNproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.