FBI Raids Texas Homes Tied to North Korean IT Identity Scam That Netted $3 Million

Federal agents conducted raids on 40 residences in Texas this week as part of a coordinated effort to dismantle a North Korean cyber‑crime operation that masqueraded as IT service providers. The scheme leveraged stolen U.S. identities to gain access to corporate networks, ultimately extracting roughly $3 million from about 70 American companies.

According to the Justice Department, the perpetrators created fictitious contractor profiles using personal data lifted from compromised sources. By presenting themselves as legitimate IT specialists, they were able to secure short‑term contracts, install remote‑access tools, and bill clients for services that were either never performed or were used to exfiltrate data.

North Korea has a well‑documented history of using cyber‑theft to fund its regime, with groups such as Lazarus linked to ransomware attacks, cryptocurrency theft, and bank heists. This latest operation marks a shift toward low‑profile, service‑oriented fraud that is harder for victims to detect because it mimics routine IT support engagements rather than high‑impact ransomware events.

The Department of Justice announced that the raids were part of a broader, multi‑agency enforcement campaign involving the FBI, Secret Service and other partners. Officials said the actions resulted in the seizure of computers, servers and other equipment used to manage the fraudulent contracts, and that criminal charges are forthcoming against those identified.

Industry observers warn that the incident underscores the need for stricter vendor verification and identity‑validation practices. Companies are being urged to cross‑check contractor credentials, monitor for unusual access patterns, and educate staff about the risks of unsolicited IT assistance offers. The investigation remains active, and authorities indicate that additional arrests and indictments are likely as they continue to trace the network’s financial flows and technical infrastructure.