cyber.hendryadrian.com
Security News · darkreading.com

FBI Operation Targets Texas Laptop Farms Linked to North Korean IT Worker Schemes

· Original article ↗

Summary

Operation Lonestar Roundup targeted alleged Texas laptop farms tied to DPRK IT-worker schemes, seizing 187 devices and charging 14 people. The episode also covers Russian arrests tied to DataSuckers and a reported Staples support-system breach used to issue $5 millionin

Key points

  • Operation Lonestar Roundup involved FBI raids at more than 40 Texas residences; authorities seized 187 devices and charged 14 people accused of facilitating DPRK IT-worker schemes.
  • The FBI said schemes disrupted by the operation affected more than 70 US companies. DPRK workers allegedly use false or stolen identities to obtain jobs and access sensitive data or intellectual property.
  • Russian police arrested three people suspected of belonging to DataSuckers, a group that has claimed attacks against companies in Russia and Ukraine.
  • A report by 404 Media said a Chinese criminal operation breached Staples' internal customer-support system and issued about 15,000 gift cards worth $5 million.
  • The article says details of how the Staples attackers accessed the support system and gift-card processes remain unclear.

Article Details

Event Type
Law-enforcement action against an alleged DPRK IT-worker scheme using Texas laptop farms; the article also reports arrests of suspected DataSuckers members and separate cybercrime breaches.
Impact
The FBI operation, dubbed Operation Lonestar Roundup, reportedly involved raids at more than 40 Texas residences, the seizure of 187 devices, and charges against 14 people accused of facilitating the scheme. According to the FBI, the schemes affected more than 70 US companies. Separately, a reported breach of Staples’ internal customer support system allegedly enabled the issuance of 15,000 gift cards worth $5 million; a Dodo Pizza breach reportedly exposed customer data.

People

Dennis FridmanNamed as a 19-year-old alleged DataSuckers hacker; the transcript says Russian authorities arrested three suspected members of the group.

Threat Actors

DataSuckersA suspected cybercriminal group whose members were reportedly arrested in Russia; the group has claimed attacks against companies in Russia and Ukraine.

Countries

Chinathis week. It is from 404 Media. There was a big breach at Staples. Apparently, a cybercrime ring out of China hacked into Staples' support system and issued five million dollars, churning out gift cards. Gift cardsNorth Koreaat every level are dealing with North Korean operators trying to either get paychecks to send back to North Korea or to get data that they can use to exploit later and it's — I don't know if it's getting uglier, butRussiagroup known as the "DataSuckers," which has taken credit for several breaches against companies in Russia and Ukraine; and according to a report from 404 Media, a Chinese criminal operation breached Staples'Ukraineknown as the "DataSuckers," which has taken credit for several breaches against companies in Russia and Ukraine; and according to a report from 404 Media, a Chinese criminal operation breached Staples' internalUnited StatesThe US government is striking back against the ever-persistent threat of fake IT worker schemes run by the Democratic People's Republic of Korea (DPRK).

Industries

GroceryThe group has also claimed attacks against Tez Tour, which is a Russian travel company, and Ukrainian grocery giant ATB, which is very unusual. Because by all accounts, expert accounts, they don't seem to beTravelRussian customers, obviously. The group has also claimed attacks against Tez Tour, which is a Russian travel company, and Ukrainian grocery giant ATB, which is very unusual. Because by all accounts, expert