The FBI has disrupted a North Korean scheme that placed information technology workers in American companies. Investigators worked with the cybersecurity firm CrowdStrike on the operation.
The effort targeted so-called laptop farms. These sites used stolen American identities to secure remote tech jobs. The earnings flowed back to Pyongyang.
Officials say the operation generated revenue for North Korea’s government. The money helped fund programs despite international sanctions. The scheme relied on identity theft and remote work.
Laptop farms house multiple computers in one location. Operators use fake credentials to pass hiring checks. They then perform jobs remotely while hiding their true location.
CrowdStrike provided technical support to federal investigators. The company traced digital footprints linked to the network. That assistance helped map how the operation worked.
The FBI has warned companies about this growing threat. Remote hiring can expose employers to foreign infiltration. Background checks alone may not catch every case.
North Korea has used similar tactics for years. Technology jobs offer steady income and access to corporate systems. The model is difficult to detect and shut down.
The disruption marks a notable win for U.S. authorities. It also highlights the role of private firms in national security. Cooperation between agencies and companies remains central to such cases.
Companies should verify remote workers more carefully. Simple steps like in-person meetings can reduce risk. Awareness of laptop farms helps protect both employers and the public.





