A major international law enforcement operation, led by the US Department of Justice, has dismantled one of the world's largest botnets known as 911 S5. The botnet, which had infected over 19 million IP addresses worldwide including over 600,000 in the US, was used for various illegal activities such as cyber attacks, financial fraud, child exploitation materials online, bomb threats and other schemes.
The alleged mastermind behind the botnet was identified as YunHe Wang, a Chinese national. He was arrested on May 24 in Singapore for his role in deploying malware and creating the botnet. From 2014 through July 2022, Wang and others are believed to have created and disseminated malware to compromise millions of residential Windows computers worldwide.
Wang generated millions of dollars by offering cybercriminals access to these infected IP addresses for a fee. The botnet was used in schemes that resulted in losses of about $5.9 billion, according to the Departments of Justice and Treasury.
Authorities seized about $4 million worth of luxury assets including a Ferrari and Rolls-Royce, and $30 million in real estate properties across East Asia, Middle East, Caribbean and US. Wang used money earned from renting the botnet to buy property in those locations.
The operation involved international cooperation between law enforcement agencies in Singapore, Thailand, the FBI and other US law enforcement agencies. The investigation is ongoing.