FBI warns of North Korean operatives posing as remote IT workers to steal data and fund regimes through global infiltration
The FBI has issued a warning about North Korean operatives infiltrating global companies by impersonating legitimate remote IT workers.These operatives steal sensitive information and generate millions of dollars for the North Korean regime.
Involvement of U.S. citizens as facilitators has been reported, prompting coordinated actions from the FBI and the U.S. Department of Justice (DOJ).
One significant effort is Operation Lonestar Roundup, targeting a widespread scheme where North Korean IT workers use stolen identities to gain employment and support Pyongyang’s weapons initiatives.
JUST IN – FBI warns North Korean operatives are infiltrating companies worldwide by posing as legitimate remote IT workers, stealing sensitive data and funneling millions of dollars to the regime.
The schemes involve stolen identities and facilitators, including U.S. citizens.
— Insider Paper (@TheInsiderPaper) October 22, 2026
Key details
Thousands of skilled North Korean IT workers are posing as remote employees to secure high-paying tech positions.
The financial implications are staggering, with estimates suggesting the scheme generates nearly $800 million annually for the North Korean regime.
Operatives utilise domestic “laptop farms,” enlisting willing or unwitting U.S. citizens to host company-issued laptops and assist in identity verification.
In October 2026, law enforcement took action by announcing charges against 14 individuals, executing two arrests, and seizing almost 190 electronic devices from over 40 suspected laptop farm locations.
The dangers extend beyond financial fraud, as this access enables potential intellectual property theft, corporate espionage, and extortion targeting businesses.
