U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud
US charges 14, seizes 187 computers in North Korean IT worker fraud scheme.
Run computers?
Get an email when a reviewed story names computers, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
The U.S. Department of Justice has charged 14 individuals and seized approximately 187 computers as part of an operation to dismantle a fraudulent remote IT worker scheme orchestrated by North Korea. The indictment alleges that these individuals, including U.S. citizens and Chinese nationals, conspired to defraud over 70 U.S. companies through wire fraud.
The lesson from this incident
Full lessonOver 14 individuals conspired to place North Korean nationals as remote IT workers inside more than 70 U.S. companies, using laptop farms and stolen identities to circumvent hiring controls. The root failure was a lack of rigorous identity verification and vetting during the remote hiring process, allowing threat actors to gain trusted insider access to corporate systems and data. This scheme demonstrates that supply chain risk extends beyond software vendors to the human element — contractors and remote workers who are granted access to sensitive environments. The consequences include data theft, financial fraud, and potential espionage, all conducted under the cover of legitimate employment.