● Covered by 6 sources · 6 reportsMedium impact1 negative5 neutral
DOJ Disrupts North Korean IT Worker Scheme, Arrests Two US Nationals
Key points
- DOJ raided over 40 residences in Texas, seizing 187 laptops.
- Two U.S. nationals arrested on wire fraud, money laundering, identity theft charges.
- Scheme generated over $3 million for North Korea from U.S. companies.
- Funds allegedly supported North Korea's weapons development programs.
- North Korean hackers infiltrated at least 70 U.S. companies.
- CrowdStrike assisted the FBI in the investigation.
- Michael James Bostelle and Juan Cecilio Pena Carrillo were arrested.
- The scheme ran between 2019 and July 2025.
- The indictment charges 10 China-based individuals.
- North Korea earns around $500 million annually from this scheme.
- Amazon's IT department detected a North Korean infiltrator due to 110ms keyboard input lag.
- The U.S. shut down 29 North Korean laptop farms across 16 states last year.
- The operation is codenamed "Lonestar Roundup".
- The FBI searched 40 residences between September 21 and 25.
DOJ Disrupts North Korean IT Worker Scheme
The Department of Justice (DOJ) conducted raids on multiple "laptop farms" across Texas between September 21-25, targeting over 40 residences. These operations were part of an effort to dismantle a North Korean IT worker scheme that allegedly generated millions of dollars for the country.
Law enforcement seized 187 laptops and other devices used by North Korean nationals involved in the scheme. This disruption aims to cut off a significant revenue source for North Korea, which the DOJ states is used for illicit purposes, including weapons development.
Arrests and Indictments
Alongside the raids, the DOJ indicted and arrested two U.S. nationals: Michael James Bostelle of Pennsylvania and Juan Cecilio Pena Carrillo of Texas. They face charges of wire fraud, money laundering, and identity theft. Several Chinese and North Korean nationals were also indicted in connection with the scheme.
Prosecutors allege that Bostelle and Pena were central figures in the U.S. operations, helping a group of North Koreans earn over $3 million from approximately 70 U.S. companies across 17 states, including those in healthcare, cybersecurity, retail, and manufacturing.
Scheme Mechanics and Impact
The IT worker scheme involved North Korean nationals using stolen or purchased identities to secure remote, lucrative IT roles with U.S. companies. Bostelle and Pena allegedly hosted laptops and assisted IT workers in obtaining and using fake identification documents to gain employment or verify bank accounts.
Assistant Attorney General for National Security John Eisenberg stated that these schemes not only provide revenue for North Korea's weapons programs but also threaten the security of IT systems and data of deceived U.S. employers, leading to numerous identity theft victims.
Updates
- Michael James Bostelle and Juan Cecilio Pena Carrillo were arrested.
- The scheme ran between 2019 and July 2025.
- The indictment charges 10 China-based individuals.
- North Korea earns around $500 million annually from this scheme.
- Amazon's IT department detected a North Korean infiltrator due to 110ms keyboard input lag.
- The U.S. shut down 29 North Korean laptop farms across 16 states last year.
- The operation is codenamed "Lonestar Roundup".
- The FBI searched 40 residences between September 21 and 25.
- North Korean hackers infiltrated at least 70 U.S. companies.
- CrowdStrike assisted the FBI in the investigation.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
The U.S. Department of Justice disrupted the Famous Chollima North Korean IT worker operation, arresting two individuals and seizing 187 laptops. This action targets a scheme that uses fraudulent identities to secure remote tech jobs and generate revenue for the DPRK regime, impacting 70 companies and generating $3 million.
The U.S. Department of Justice charged 14 individuals and seized 187 computers, dismantling over 40 "laptop farms" in Texas, as part of an operation against a North Korean remote IT worker fraud scheme. This action aims to disrupt illicit revenue generation for North Korea's military programs, which violated international sanctions.
The FBI, with assistance from CrowdStrike, shut down over 40 North Korean laptop farms in Texas, seizing more than 200 devices. This action targets North Korea's scheme to use fake remote workers to generate income, which reportedly earns the country around $500 million annually despite economic sanctions.
Two US nationals were arrested for allegedly helping North Korean IT workers fraudulently obtain remote employment at over 70 US companies, generating over $3 million. This operation highlights ongoing efforts to counter North Korean revenue generation schemes that exploit US businesses.
The US Department of Justice announced indictments and arrests related to North Korean hackers using American facilitators and stolen identities to infiltrate at least 70 US companies. Federal authorities seized over 180 computers from "laptop farms" in Texas, which were used by North Korean IT workers to remotely access company networks and steal data, generating an estimated $3 million in stolen funds.
The Department of Justice disrupted multiple "laptop farms" in Texas and arrested two U.S. nationals, Michael James Bostelle and Juan Cecilio Pena Carrillo, for their alleged involvement in a North Korean IT worker scheme. This operation aimed to cut off a revenue stream for North Korea, which used the funds for illicit purposes, including weapons development.