FBI Uncovers North Korean Technology Hub in the US

The US Federal Bureau of Investigation (FBI) dismantled a laptop farm network in Texas that helped North Korean information technology (IT) workers infiltrate US companies’ systems. The workers are suspected of using stolen or forged US identities.

In an operation called Operation Lonestar Roundup, the FBI searched more than 40 homes in Texas and seized 187 laptops and keyboard, video and mouse (KVM) devices. Around 100 of the devices were seized in northern Texas.

According to the investigation, North Korean IT workers used fake identity documents, virtual private networks (VPNs) and proxy networks to make it appear that they were working from the US. They were assisted by local facilitators who received and managed laptops belonging to victim companies, installed remote-access software and transferred earnings to accounts controlled by North Korea.

US authorities said the scheme generated revenue for the North Korean regime, including to support weapons programmes subject to international sanctions.

“Each laptop seized could represent one company that had hired a North Korean IT worker,” said R. Joseph Rothrock, head of the FBI’s Dallas Field Office, according to an official statement from the US Department of Justice on Friday (16 October 2026).

Cybersecurity company CrowdStrike identified the North Korean IT workers and their accomplices as “Famous Chollima”. Investigators also found that the suspects allegedly used a network of fake Google accounts to carry out the illegal activity.