The gloves came off for cybercrime in a major takedown led by the US Department of Justice (DOJ). A coordinated international operation dismantled the notorious 911 S5 botnet, a vast network of hijacked computers used for a variety of nefarious activities.

YunHe Wang: From Botnet Architect to Arrested

At the center of this criminal web stood YunHe Wang, a 35-year-old Chinese national. Wang, also a citizen of St. Kitts and Nevis, now faces charges for deploying malware and operating the infamous "911 S5" proxy service.

Millions of Machines Infected, Billions in Fraud Attempted

The DOJ alleges that from 2014 to 2022, Wang and his associates infected millions of Windows computers worldwide, generating a massive network of compromised devices. These hijacked machines, disguised by over 19 million unique IP addresses (including over 600,000 in the US alone), became tools for cybercrime.

Criminals paid Wang handsomely for access to this botnet, allegedly generating millions of dollars. The indictment further claims that the 911 S5 botnet facilitated a shocking array of illegal activities – financial fraud, identity theft, and even the exploitation of children.

Pandemic Relief Fraud? Not Today

The botnet's reach even extended to pandemic relief programs. Investigators linked compromised IP addresses to fraudulent unemployment claims and Economic Injury Disaster Loan (EIDL) applications, leading to confirmed losses exceeding a staggering $5.9 billion.

From Malware Mastermind to Luxury Lifestyle

Wang allegedly spread his malicious code through popular VPN programs and other distribution methods. He controlled the infected devices and ran the 911 S5 service from a network of servers, including dozens leased in the US.

The indictment further details how Wang allegedly profited from his crimes, amassing an estimated $99 million from selling access to the compromised computers. This ill-gotten fortune reportedly funded a lavish lifestyle, with luxury cars, high-end watches, real estate, and cryptocurrency wallets all listed for potential seizure by authorities.

The takedown of the 911 S5 botnet and arrest of YunHe Wang sends a powerful message to cybercriminals – law enforcement can and will disrupt large-scale criminal operations. With international cooperation, the fight for a safer digital space continues.