DALLAS – In a significant operation, federal agents have disrupted an online network in Texas that was allegedly facilitating North Korean IT workers in illegally accessing U.S. corporate systems. This network reportedly utilized stolen or fabricated American identities to generate revenue for North Korea’s weapons programs, highlighting a serious cybersecurity threat.
The FBI conducted thorough searches at over 40 residences across Texas, seizing 187 laptops and various electronic devices. These devices were purportedly being utilized as “laptop farms” by North Korean IT workers, allowing them to control computers remotely via keyboard, video, and mouse connections.
U.S. Attorney Ryan Raybould emphasized the gravity of this investigation, stating, “This investigation is about far more than fraud. It is about a hostile foreign regime infiltrating American companies through stolen identities and covert access points inside our own borders.” Such statements underline the high stakes involved in this case, revealing not only financial fraud but also national security implications.
The Department of Justice identified the North Korean IT workers as members of a group known as “Famous Chollima.” This group applied for remote jobs by using stolen or fabricated identity documents, coupled with private networks to simulate their presence in the United States. This sophisticated approach demonstrates the lengths to which these operatives are willing to go to circumvent international law and exploit vulnerabilities in American corporate systems.
According to the DOJ, the scheme significantly contributed to North Korea’s weapons of mass destruction, ballistic missile programs, intelligence efforts, and nuclear program. The ramifications of such cyber operations extend beyond immediate financial gains, posing a direct threat to international security and stability.
The release of this information also included alleged email addresses associated with the scheme, inviting anyone with further knowledge to report their findings through the Internet Crime Complaint Center website. This call for public assistance reflects an ongoing commitment to collaborative efforts in combating cybercrime and enhancing national security.
As this situation develops, it serves as a critical reminder of the vulnerabilities present in our digital landscape. The integration of cybersecurity practices within all levels of business operations is essential to safeguard against such infiltrations and protect both economic and national interests.

