The Department of Justice recently announced the shutdown of a global malware network responsible for the theft of $5.9 billion in Covid relief funds. The mastermind behind this network, YunHe Wang, a Chinese national, was arrested and charged with creating a “botnet” that enabled hackers to remotely launch cyberattacks. This botnet, known as “911 S5,” operated from servers located worldwide, including some in the U.S. Wang allegedly hacked into over 19 million IP addresses in nearly 200 countries, with about 614,000 of those addresses in the U.S. The DOJ revealed that the botnet was used for various criminal activities, including child exploitation and bomb threats in addition to the theft of Covid relief funds.
The FBI, in collaboration with other international law enforcement agencies, conducted a sting operation to dismantle the botnet and apprehend Wang. The authorities also released a guide to help users identify if their devices had been targeted by the malware and provided steps to remove it. The indictment against Wang revealed that he made approximately $99 million by selling access to the compromised IP addresses to cybercriminals. This money was then used to fund a lavish lifestyle which included luxury cars, watches, and properties around the world.
Criminal Charges and Sanctions
Wang is facing a maximum 65-year prison sentence on four criminal counts, which include conspiracy to commit computer fraud, substantive computer fraud, conspiracy to commit wire fraud, and conspiracy to commit money laundering. This arrest comes on the heels of the Treasury Department sanctioning Wang and two others for their involvement with 911 S5. Additionally, three companies owned or controlled by Wang were also hit with sanctions by the Treasury.
The takedown of the 911 S5 botnet is a significant victory for law enforcement agencies, as it highlights the importance of collaboration between domestic and international partners in combating cybercrime. The arrest of Wang serves as a warning to cybercriminals who engage in similar illegal activities. Moreover, this incident underscores the need for constant vigilance and updates to cybersecurity protocols. The U.S. has expressed particular concern about China-backed hackers targeting American infrastructure, with recent reports of hacking groups attempting to infiltrate critical systems such as water plants and electric grids. FBI Director Christopher Wray has emphasized the ongoing threat posed by cybercriminals and the need for enhanced security measures to protect personal and corporate data from unauthorized access.
The shutdown of the 911 S5 botnet marks a significant milestone in the fight against cybercrime. The collaborative efforts of the DOJ, FBI, and international law enforcement agencies have demonstrated the effectiveness of working together to bring down criminal networks operating on a global scale. This case serves as a reminder of the ever-evolving nature of cybersecurity threats and the importance of staying one step ahead to safeguard sensitive information and prevent financial losses.
Leave a Reply