<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>DPRK IT workers · Threat Recap</title><link>actors/dprk-it-workers.html</link><description>News mentioning DPRK IT workers</description><lastBuildDate>Mon, 19 Oct 2026 12:28:44 GMT</lastBuildDate>
<item><title>Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION</title><link>https://securityaffairs.com/201218/breaking-news/security-affairs-newsletter-round-600-by-pierluigi-paganini-international-edition.html</link><guid isPermaLink="false">1jke1kd</guid><pubDate>Sun, 18 Oct 2026 08:37:32 GMT</pubDate><description>Security Affairs. A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. North Korean…</description><category>APT</category></item>
<item><title>North Korean IT Workers Used Stolen US Identities to Earn $3 Million</title><link>https://securityaffairs.com/201193/intelligence/north-korean-it-workers-used-stolen-us-identities-to-earn-3-million.html</link><guid isPermaLink="false">e1elcj</guid><pubDate>Sat, 17 Oct 2026 16:29:10 GMT</pubDate><description>Security Affairs. The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement actions this week targeting North Korea’s long-running scheme…</description><category>APT</category></item>
<item><title>Risky Bulletin: Russia arrests DataSuckers hacking group</title><link>https://news.risky.biz/risky-bulletin-russia-arrests-datasuckers-hacking-group/</link><guid isPermaLink="false">1bz78u2</guid><pubDate>Fri, 16 Oct 2026 02:01:33 GMT</pubDate><description>Risky Bulletin. In other news: Al Jazeera employees targeted with Candiru spyware; US disrupts 40 DPRK laptop farms; OpenAI employee arrested for planting spy device.</description><category>Law &amp; policy</category><category>APT</category></item>
<item><title>The OpenSourceMalware Show #25</title><link>https://opensourcemalware.com/blog/the-opensourcemalwareshow-episode25</link><guid isPermaLink="false">1q4u3ig</guid><pubDate>Thu, 15 Oct 2026 18:00:00 GMT</pubDate><description>OpenSourceMalware. GitHub security improvements, GhostAction phishes OSS maintainers, and DoJ shuts down DPRK laptop farms</description><category>Research</category><category>Malware</category><category>APT</category></item>
<item><title>FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested</title><link>https://www.bleepingcomputer.com/news/security/fbi-raids-dprk-it-worker-laptop-farms-in-texas-us-nationals-arrested/</link><guid isPermaLink="false">y4a9sc</guid><pubDate>Wed, 14 Oct 2026 19:41:43 GMT</pubDate><description>BleepingComputer. The U.S. Department of Justice (DoJ) has disrupted the Famous Chollima threat group&#39;s operations by arresting two suspects, charging 14 individuals, and seizing nearly 187 laptops used in North Korean remote IT worker schemes. [...]</description><category>Law &amp; policy</category><category>APT</category></item>
<item><title>U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud</title><link>https://thehackernews.com/2026/10/us-shuts-down-over-40-laptop-farms.html</link><guid isPermaLink="false">k96mgj</guid><pubDate>Wed, 14 Oct 2026 16:34:31 GMT</pubDate><description>The Hacker News. The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers and KVM devices as part of its ongoing efforts to disrupt North Korea&#39;s fraudulent remote IT worker (ITW) scheme. The indictment charges a mix of U.S. citizens…</description><category>APT</category></item>
<item><title>Feds crack down on North Korean IT-worker schemes with new raids, charges and arrests</title><link>https://www.cybersecuritydive.com/news/north-korea-it-worker-raids-arrests-charges/832968/</link><guid isPermaLink="false">30g1wt</guid><pubDate>Wed, 14 Oct 2026 14:46:07 GMT</pubDate><description>Cybersecurity Dive. The latest operation targeted “laptop farms” across Texas that allegedly aided North Korea’s moneymaking plots.</description><category>Law &amp; policy</category><category>APT</category></item>
<item><title>FBI raids 40+ laptop farms helping North Korea pocket US tech salaries</title><link>https://www.helpnetsecurity.com/2026/10/14/north-korean-it-workers-laptop-farms-arrests/</link><guid isPermaLink="false">z4vcme</guid><pubDate>Wed, 14 Oct 2026 13:00:49 GMT</pubDate><description>Help Net Security. North Korean IT workers used stolen and fabricated identities to land remote jobs at more than 70 US companies, with help from Americans who allegedly kept company-issued laptops running from their homes, according to the US Department of Justice. Arrests in…</description><category>Law &amp; policy</category><category>APT</category></item>
<item><title>FBI Disrupts North Korean Famous Chollima Laptop Farms Used to Infiltrate U.S. Companies</title><link>https://cybersecuritynews.com/famous-chollima/</link><guid isPermaLink="false">1mk0req</guid><pubDate>Wed, 14 Oct 2026 12:37:23 GMT</pubDate><description>Cybersecurity News. The FBI disrupted several U.S. laptop farms used by North Korean threat group FAMOUS CHOLLIMA in late September 2026, cutting off infrastructure that helped fake remote workers enter American companies. CrowdStrike disclosed the joint operation on October 13,…</description><category>APT</category><category>Law &amp; policy</category></item>
<item><title>US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms</title><link>https://www.securityweek.com/us-arrests-two-in-crackdown-on-north-korean-it-worker-laptop-farms/</link><guid isPermaLink="false">tlqrgb</guid><pubDate>Wed, 14 Oct 2026 10:55:21 GMT</pubDate><description>SecurityWeek. Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.</description><category>Law &amp; policy</category><category>APT</category></item>
<item><title>Two arrested as DOJ takes down laptop farms responsible for $3 million in North Korean revenue</title><link>https://therecord.media/north-korea-laptop-farms-worker-scams-doj-raids-texas</link><guid isPermaLink="false">8zyejs</guid><pubDate>Tue, 13 Oct 2026 20:55:00 GMT</pubDate><description>The Record. More than 40 residences in Texas were the target of a federal operation in September to clamp down on remote worker scams that feed money back to the North Korean regime.</description><category>Law &amp; policy</category><category>APT</category></item>
</channel></rss>
