Search — “Famous Chollima”

The DOJ charged 14 people, including US and Chinese nationals, in a North Korean (Famous Chollima) IT worker scheme that impacted more than 70 US companies, with about 187 computers and KVM devices seized and more than 40 laptop farms in Texas dismantled. CrowdStrike reports operatives file fraudulent stolen-laptop police reports and divert devices during onboarding to farm addresses, and since May 2026 have spoofed device hashes, such as a video capture card posing as a webcam. Hunters should look for employer-issued devices shipped to residential addresses, replacement-shipment requests, and hardware identifiers that mimic capture cards as webcams.