WASHINGTON. An international law enforcement team has arrested a Chinese national accused of running one of the world’s largest cybercrime botnets. Officials report that Yunhe Wang, 35, operated the “911 S5” botnet for nearly a decade, generating at least $99 million in profits by selling access to cybercriminals. These criminals used the botnet for various illicit activities, including identity theft, child exploitation, and financial fraud, notably pandemic relief scams.
FBI Director Christopher Wray described the “911 S5” botnet as likely the world’s largest, comprising a network of malware-infected computers spread across nearly 200 countries. “This botnet has been a significant threat to global cybersecurity,” Wray stated on Wednesday.
Wang was arrested on May 24 in Singapore, where search warrants were executed alongside additional warrants in Thailand, according to Brett Leatherman, the FBI’s deputy assistant director for cyber operations. Authorities also seized $29 million in cryptocurrency linked to Wang’s operations.
The botnet’s extensive reach involved approximately 19 million hijacked Windows computers, with over 613,000 of those located in the United States. The U.S. Department of Justice highlighted that Wang’s network enabled criminals to commit a wide array of crimes, resulting in billions of dollars in losses. “Criminals who bought access from Wang were responsible for an estimated $5.9 billion in fraud against relief programs,” said U.S. Attorney General Merrick Garland.
The indictment, filed in Texas’ eastern district, details that Wang’s botnet facilitated the theft of billions of dollars from financial institutions, credit card issuers, and federal lending programs since 2014. Furthermore, it is estimated that 560,000 fraudulent unemployment insurance claims originated from compromised IP addresses within the botnet.
Wang allegedly managed the botnet through 150 dedicated servers, with half of these leased from U.S.-based online service providers. His illicit gains were used to purchase 21 properties across the United States, China, Singapore, Thailand, the United Arab Emirates, and St. Kitts and Nevis, where he reportedly obtained citizenship through investment.
The Justice Department expressed gratitude to law enforcement agencies in Singapore and Thailand for their crucial assistance in the operation. This international cooperation underscores the global commitment to tackling cybercrime and protecting victims worldwide.
Carlo Juancho FuntanillaFrontend Developer, WordPress, Shopify
Contributing Editor
AMA ACLC San Pablo
