{
  "id": 14476830,
  "title": "FBI shuts down over 40 North Korean laptop farms used by fake remote workers",
  "url": "https://urgent.news/2026/10/14/fbi-shuts-down-over-40-north-korean-laptop-farms-used-by-fake-remote",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-14T14:41:34.000Z",
  "source": {
    "name": "Tom's Hardware",
    "slug": "tom-s-hardware",
    "url": "https://www.tomshardware.com/tech-industry/cyber-security/fbi-shuts-down-over-40-north-korean-laptop-farms-used-by-fake-remote-workers-over-200-devices-seized-in-texas-although-no-arrests-were-made-so-far"
  },
  "original_language": "en",
  "account": "The FBI has dismantled a vast network of North Korean laptop farms operating within the United States, in collaboration with CrowdStrike. The agency disrupted over 40 farms in Texas, resulting in the seizure of more than 200 devices, according to The New York Times. No arrests have been made yet, as authorities aimed to dismantle the operations promptly and did not await prosecutors' charges, though they cautioned potential criminal penalties for continued involvement in remote fraud. North Korea has been employing fake remote workers to generate income, despite international sanctions. The scheme reportedly generates around $500 million annually, impacting both startups and Fortune 500 companies. Amazon's IT department detected one North Korean infiltrator due to a 110ms keyboard input lag, revealing their remote location. The U.S. has been intensifying efforts to curb this scheme since last year, after previously dismantling 29 North Korean laptop farms across 16 states, aiding the employment of North Korean IT workers at over a hundred U.S. companies. Four U.S. citizens and a Ukrainian national were convicted of related scams in November 2025, with the Justice Department recently unsealing indictments against two U.S. citizens and 10 China-based North Koreans. Prosecutors stated that the latter group defrauded over $3 million from 70 companies over six years, with the identities of two more individuals still sealed. Despite the significant number of networks taken down, CrowdStrike's Adam Meyers, overseeing counter adversary operations, asserts that the scheme is \"growing both in prevalence and complexity.\" He emphasized the difficulty in gauging the full extent of the problem, noting that CrowdStrike identified an average of two new cases daily last month, likely just the tip of the iceberg. Central to North Korea's operations are facilitators based in the United States who assist in evading security measures by hosting the fraudulent work laptops, making the deception appear more credible. Initially, the job seems lucrative, but it becomes increasingly complex as the operation advances. \"They get kind of hooked on it initially, and then more gets asked of them, and they're kind of in too deep at that point,\" Meyers told the publication.",
  "summary": "CrowdStrike has helped the FBI identify these sites, which Pyongyang uses to earn as much as $500 million annually to help fund its nuclear and other weapons programs.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Hacker News",
        "title": "U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud",
        "url": "https://urgent.news/2026/10/14/u-s-shuts-down-over-40-laptop-farms-charges-14-in-north-korean-it",
        "published": "2026-10-14T16:34:31.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}