This is one of the largest operations dedicated to shutting down North Korean laptop farms in the U.S. so far.
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works .
North Korea has been using fake remote workers to earn income despite the economic sanctions placed against the hermit kingdom. It has been reported that it earns around $500 million a year under this scheme, which affects both startups and Fortune 500 companies. Amazon ’s IT department actually caught one North Korean infiltrator after it noticed a 110ms keyboard input lag , betraying their distant location.
The U.S. has been clamping down on this scheme since last year, after it shut down 29 North Korean laptop farms across 16 states that were facilitating the employment of North Korean IT workers across over a hundred U.S. companies. Four U.S. citizens and a Ukrainian national were convicted over scams like this in November 2025, with the Justice Department unsealing indictments against two U.S. citizens and 10 China-based North Koreans recently. Prosecutors said that the last group defrauded more than $3 million from 70 companies over a span of six years from 2019, and that the identities of two more individuals involved in the case remain under seal.
Despite the number of networks that U.S. authorities have been able to shut down since last year, CrowdStrike’s Adam Meyers, who’s in charge of the company’s counter adversary operations, says that this scheme is “increasing both in prevalence and complexity.” He noted that it’s difficult to know how truly widespread the problem is and that even though CrowdStrike has identified an average of two new cases daily last month, it was most probably just the tip of the iceberg.
Facilitators are the one crucial aspect that North Korea’s operations rely on. These are people based in the United States who help bypass security measures by hosting the work laptops that companies send to the fraudulent North Korean IT workers to make it appear as if they’re based in the country. While the job looks like easy money from that start, it would eventually become more complicated as the operation progresses. “They get kind of hooked on it initially, and then more gets asked of them, and they’re kind of in too deep at that point,” Meyers told the publication.
North Korea used job interviews to deploy malware on 30,000 devices during coding tests
North Korea named as primary suspect in $387 million Bitget crypto hack
Key considerations
- Investor positioning can change fast
- Volatility remains possible near catalysts
- Macro rates and liquidity can dominate flows
Reference reading
- https://www.tomshardware.com/tech-industry/cyber-security/SPONSORED_LINK_URL
- https://www.tomshardware.com/tech-industry/cyber-security/fbi-shuts-down-over-40-north-korean-laptop-farms-used-by-fake-remote-workers-over-200-devices-seized-in-texas-although-no-arrests-were-made-so-far#main
- https://www.tomshardware.com/membership
- Rally Up: ‘Gears of War: E-Day’ Launches on GeForce NOW
- Bambu Lab officially teases its first 3D scanner
- SpaceX limits Starlink service for Ukraine’s high-speed military drones without prior warning
- Walmart has slashed $750 off this RTX 5060 gaming laptop, now 40% cheaper
- NVIDIA DGX Spark 64GB Gives Developers More Ways to Build and Scale Local AI
Informational only. No financial advice. Do your own research.