US arrests Yune Wang for role in 911 S5 botnet scam

abdelaziz Fathi

A global malware network, linked to the theft of $5.9 billion in Covid relief funds and crypto crimes, has been dismantled, the Department of Justice (DOJ) announced today. The network was also involved in child exploitation, bomb threats, and various cyberattacks.

The DOJ has arrested 35-year-old YunHe Wang, a Chinese national, who was charged with creating and operating the “911 S5” botnet. This type of malware connects a network of hacked devices, allowing criminals to remotely launch cyberattacks. FBI Director Christopher Wray described it as “likely the world’s largest botnet ever.”

From 2014 to 2022, Wang managed the 911 S5 botnet using approximately 150 servers worldwide, including some in the U.S. According to the indictment, the botnet compromised over 19 million IP addresses across nearly 200 countries, with about 614,000 IP addresses located in the U.S.

A separate analysis by blockchain analytics firm Chainalysis revealed that wallet addresses associated with Wang held over $130 million in digital assets earned through illicit commissions.

Researchers at Chainalysis stated:”The 911 S5 botnet provided these services by distributing deceptive free VPN services, claiming to offer enhanced privacy while actually using backdoors to hijack millions of IP addresses globally. This allowed the 911 S5 administrators to make millions annually through a subscription-based service for cybercriminals.”

The FBI has provided a guide for users to check if their devices were affected by the 911 S5 attack and instructions on how to remove the malware if necessary.

Wang allegedly sold access to the compromised IP addresses to cybercriminals, amassing at least $99 million. He reportedly used these illicit earnings to purchase luxury cars, watches, and properties around the world.

The DOJ stated that the 911 S5 botnet was used for various crimes, including fraud, stalking, harassment, and the illegal exportation of goods. It notably targeted Covid relief programs, filing an estimated 560,000 false unemployment insurance claims and stealing $5.9 billion.

“The conduct alleged here reads like it’s ripped from a screenplay,” said Assistant Secretary for Export Enforcement Matthew S. Axelrod of the U.S. Department of Commerce’s Bureau of Industry and Security.

This arrest follows the U.S. Treasury Department’s sanctions against Wang and two associates for their involvement with the 911 S5 botnet. The Treasury also sanctioned three companies owned or controlled by Wang: Spicy Code Company Limited, Tulip Biz Pattaya Group Company Limited, and Lily Suites Company Limited.

Wang faces a maximum sentence of 65 years in prison on four criminal counts: conspiracy to commit computer fraud, substantive computer fraud, conspiracy to commit wire fraud, and conspiracy to commit money laundering.

Read this next


Groundbreaking Innovations in BlockDAG’s Keynote 2 Drive Over 1120% Increase; Toncoin & Celestia Prices Rise

Explore BlockDAG’s Keynote 2, detailing the cutting-edge technical advancements that led to a significant presale boom. Discover how these innovations have driven BlockDAG’s success, and get the latest updates on Celestia and Toncoin prices.


BlockDAG X1 Beta App Pioneers in Crypto Mining Amidst Ethereum vs Solana Rivalry and XRP Price Increase

Dive into the details of BlockDAG’s X1 beta app’s global tech presence in Shibuya, Las Vegas, and Piccadilly Circus and its pre-sale triumph during a spike in Ethereum, Solana, and XRP values.


BlockDAG Hits $50.4M with Active Dev Release & Community Engagement; Binance Coin Price Drops and JasmyCoin Rallies

Explore how BlockDAG bolsters its reputation through a steady stream of Development releases. Get insights on Binance Coin price trends and the recent Jasmy Coin rally.

Crypto Insider

5 Upcoming Crypto for 10x Gains: How $1000 Can Become $10,000

Consider a situation where a $1000 investment may grow to a whopping $10,000. Astute Bitcoin investors have experienced this as a reality rather than a fantasy.

Retail FX

Weekly Roundup: eToro links up with Elon Musk, US crackdown on Russian FX

Let’s take a look back at top stories that dominated the financial markets in our Weekly Round coverage. This week’s digest takes a deep dive into the most recent events and trends within the Forex, Fintech, and cryptocurrency.


Must-Watch Top 5 Crypto Picks for Q2 2024 Featuring BlockDAG, Toncoin, Solana and More

Dive into BlockDAG’s meteoric rise and explore other promising altcoins like Pepe, Toncoin, Solana, and Render for superior returns.

Retail FX

Clone of Admiral Markets draws FCA attention

The United Kingdom’s financial markets watchdog today unmasked another fraudulent entity, this time bringing to light a clone firm that has been posing as FCA-‎authorised brand, Admiral Markets UK Ltd.

Digital Assets

Gemini Earn users to recover $2.18 billion in crypto payouts

Cryptocurrency exchange Gemini has agreed to pay $50 million worth of digital assets to investors in its Gemini Earn program as part of a settlement with the New York Attorney General (NYAG), announced on Friday.

Fundamental Analysis, Market News, Tech and Fundamental

Global FX Market Summary: British Pound (GBP) Weakness, US Inflation, Euro, USD June 14 ,2024

British Pound weakens due to lower inflation expectations, potential policy changes from Reform Party, and broader economic concerns.