🚨 Today, the @FBI and @TheJusticeDept announced a series of coordinated actions against the North Korean IT Worker threat – securing charges against 14 individuals, making two arrests, seizing nearly 190 devices, and conducting operations at more than 40 suspected “laptop farms” across Texas. These actions were taken in response to North Korea’s ongoing deployment of thousands of remote IT workers to infiltrate Western companies, earn revenue for the regime, and gain access to sensitive information. These workers are often supported by domestic enablers and laptop farms. Disrupting these schemes remains a top priority for the FBI. In 2026 alone, 8 individuals have been sentenced to prison for their roles in this activity. Coordination between the private sector and federal law enforcement was central to the latest effort. CrowdStrike’s Counter Adversary Operations team provided vital support to the FBI’s effort to identify and disrupt these laptop farms. justice.gov/opa/pr/justice-d…

Flax Typhoon threat actors use automated scanning tools, large-scale botnets, and hands-on exploitation techniques to steal sensitive data from organizations around the world. These actors are linked to the PRC government and associated with Integrity Technology Group, a China-based company. The @FBI, @CISAgov, @NSAGov, and international partners have issued a joint cybersecurity advisory on these actors to help network defenders and reduce the risk of compromise. Organizations across critical infrastructure sectors should review the TTPs, IOCs, and mitigation strategies in this report 🔗 ic3.gov/CSA/2026/261008.pdf