← Back to overview

The U.S. Department of Justice disrupted the Famous Chollima threat group, a North Korean state-sponsored operation that places IT workers remotely at foreign companies. The FBI raided laptop farms in Texas used to facilitate these schemes. Two suspects were arrested and 14 individuals were charged in connection with the operation. Nearly 187 laptops were seized as part of the enforcement action. The scheme involves North Korean nationals posing as remote IT workers to gain employment at US companies. The operation generates revenue for the North Korean regime and potentially enables insider threat activities. This is part of a broader US government effort to counter DPRK cyber and financial operations.

Affected products

  • Remote Work Infrastructure

Related threat actors

  • DPRK IT Workers
  • Famous Chollima

Categories

  • Critical Infrastructure
  • Data Breach & Exfiltration
  • Identity & Access