Ethical Hacking News
In a shocking revelation, the U.S. Department of Justice has announced the dismantling of a complex laptop farm operation, which was part of a large-scale cybercrime scheme orchestrated by North Korean IT workers. The indictment, which was unveiled on October 14, 2026, reveals a brazen attack on the global economy, with the alleged perpetrators generating approximately $3 million in revenue from more than 70 U.S. companies. The operation, which was tracked as "Famous Chollima," "purpledelta," and "Wagemole," involved the use of fake identities, stolen laptop computers, and remote-access technology to make it appear as though the North Korean IT workers were legitimate U.S.-based employees. The indictment charges a mix of U.S. citizens and Chinese nationals with wire fraud conspiracy, money laundering conspiracy, conspiracy to commit identity theft, and aggravated identity theft. The dismantling of the laptop farm operation is a significant blow to North Korea's cybercrime schemes, which have been targeting the U.S. and other countries for several years.
The U.S. Department of Justice dismantled a complex laptop farm operation orchestrated by North Korean IT workers, generating approximately $3 million in revenue from over 70 U.S. companies.The operation used fake identities, stolen laptop computers, and remote-access technology to make it appear as though the North Korean IT workers were legitimate U.S.-based employees.A network of facilitators was responsible for setting up accounts at U.S. banks and online money transfer services, and received fees for their services.The facilitators helped North Korean IT workers get hired, host company-issued laptops, and leverage remote-access technology to evade detection.The operation was tracked as "Famous Chollima," "purpledelta," and "Wagemole" to avoid detection by law enforcement agencies.The FBI has issued an alert detailing the expanded use of facilitators, subcontracting jobs to foreign nationals in South Asia or West Africa.The operation targeted economically vulnerable Americans, offering them facilitator gigs and using stolen identities to apply for jobs.The dismantling of the laptop farm operation is a significant victory in the ongoing efforts to disrupt North Korea's cybercrime schemes.
In a shocking revelation, the U.S. Department of Justice has announced the dismantling of a complex laptop farm operation, which was part of a large-scale cybercrime scheme orchestrated by North Korean IT workers. The indictment, which was unveiled on October 14, 2026, reveals a brazen attack on the global economy, with the alleged perpetrators generating approximately $3 million in revenue from more than 70 U.S. companies.
At the heart of this operation was a network of facilitators, who were responsible for setting up accounts at U.S. banks and online money transfer services. These facilitators were paid a fee for their services, which allowed the North Korean IT workers to receive regular salaries and a chunk of the funds, which were funneled back to the regime. The scheme, which was operational from around 2019 to July 2025, involved the use of fake identities, stolen laptop computers, and remote-access technology to make it appear as though the North Korean IT workers were legitimate U.S.-based employees.
According to the indictment, the North Korean IT workers were assisted by a network of facilitators, who were responsible for helping them get hired, host company-issued laptops at their residences, and leverage remote-access technology to make it appear as though they were legitimate U.S.-based employees. The facilitators were also responsible for setting up accounts at U.S. banks and online money transfer services, which enabled the movement of money paid by U.S. victim companies to the IT workers and other persons located abroad.
The operation was tracked as "Famous Chollima," "purpledelta," and "Wagemole," and it is believed that the North Korean IT workers were using these names to avoid detection by law enforcement agencies. The indictment alleges that the North Korean IT workers were using a variety of techniques to evade detection, including filing fraudulent police reports, claiming that laptops had been stolen, and using threats of physical violence to coerce others into carrying out actions that further the scheme.
The FBI has issued an alert, detailing the operation's expanded use of facilitators, in some cases subcontracting entire jobs to foreign nationals in South Asia or West Africa. The indictment also alleges that the North Korean IT workers were targeting economically vulnerable Americans, offering them facilitator gigs, and using stolen identities to apply for jobs.
The operation is the latest in a long-running and intensifying campaign by the U.S. to cut off a revenue-generation source and dismantle an evolving cyber threat from North Korea. The U.S. Federal Bureau of Investigation (FBI) has been tracking the operation for some time, and it is believed that the dismantling of the laptop farm operation is a significant victory in the ongoing efforts to disrupt North Korea's cybercrime schemes.
The indictment charges a mix of U.S. citizens and Chinese nationals with wire fraud conspiracy, money laundering conspiracy, conspiracy to commit identity theft, and aggravated identity theft. The two U.S. nationals, Juan Cecilio Pena Carrillo and Michael James Bostelle, have been arrested, while the rest remain at large. The indictment also names a shell company, Dark Falls LLC, which was allegedly used to perpetrate the criminal scheme.
The dismantling of the laptop farm operation is a significant blow to North Korea's cybercrime schemes, which have been targeting the U.S. and other countries for several years. The operation is also a reminder of the ongoing threat posed by nation-states, which are using advanced technology to exploit the economic strength of other countries to further their own nefarious agendas.
The indictment provides a detailed glimpse into the schematics of this complex cybercrime operation, which involved the use of fake identities, stolen laptop computers, and remote-access technology to make it appear as though the North Korean IT workers were legitimate U.S.-based employees. The operation is a significant victory in the ongoing efforts to disrupt North Korea's cybercrime schemes, and it highlights the need for vigilance and cooperation among law enforcement agencies to combat this evolving threat.
Related Information:
https://www.ethicalhackingnews.com/articles/North-Koreas-Laptop-Farm-Scam-Uncovering-the-Schematics-of-a-Global-Cybercrime-Operation-ehn.shtml
https://thehackernews.com/2026/10/us-shuts-down-over-40-laptop-farms.html
https://cybersecuritynews.com/u-s-doj-announces-nationwide-actions/
Published: Wed Oct 14 13:31:29 2026 by llama3.2 3B Q4_K_M
