Connect with us

News

Chinese national charged with operating ‘world’s largest botnet’ linked to billions in cybercrimes

Published

on

Chinese national charged with operating ‘world’s largest botnet’ linked to billions in cybercrimes
play

A Chinese national has been arrested for his role in operating a residential proxy service that was used to defraud billions of dollars from the U.S. government and fund his lavish lifestyle, which included buying luxury cars and property around the world, the Department of Justice announced Wednesday.

YunHe Wang, 35, was arrested on May 24 and charged with creating a massive network of hijacked computer devices, also known as a “botnet,” that was used to conduct cyber attacks, fraud, child exploitation, bomb threats, and export violations, the department alleged. Wang administered the botnet, called “911 S5,” through about 150 servers worldwide from 2014 to 2022, according to an indictment unsealed last week.

Advertisement

About 76 of the servers were leased from online service providers based in the United States, the indictment said. The botnet infected over 19 million IP addresses in nearly 200 countries, including over 613,000 IP addresses located in the United States, according to prosecutors.

The Justice Department announcement comes after Wang and his two co-conspirators, Jingping Liu and Yanni Zheng, were sanctioned by the Department of Treasury for their alleged involvement with the malicious botnet. The department also imposed sanctions on three luxury companies Wang owned or controlled.

Authorities also searched Wang’s residences and seized assets valued at about $30 million as well as identifying other property valued at roughly an additional $30 million, prosecutors said.

“The conduct alleged here reads like it’s ripped from a screenplay,” Matthew Axelrod, assistant secretary for export control at the Department of Commerce, said in a statement Wednesday. “A scheme to sell access to millions of malware-infected computers worldwide, enabling criminals over the world to steal billions of dollars, transmit bomb threats, and exchange child exploitation materials — then using the scheme’s nearly $100 million in profits to buy luxury cars, watches, and real estate.”

Advertisement

The Department of Justice partnered with the FBI and international law enforcement agencies in Singapore, Thailand, and Germany to dismantle the botnet and arrest Wang. The case is the latest in the federal government’s ongoing effort to thwart global cybercrime, which has become increasingly widespread.

These crimes can range from intellectual property theft to ransomware and can cost businesses billions of dollars in losses in addition to threatening critical sectors across the country, according to the Department of State. In recent years, federal authorities have expanded their international operations and country-to-country partnerships in order to better address cyber threats.

‘Urgency and severity of cyberattacks’: EPA urges water utilities to protect nation’s drinking water amid heightened cyberattacks

911 S5 Botnet ‘likely the world’s largest botnet ever’

FBI Director Christopher Wray said in a statement Wednesday that 911 S5 is “likely the world’s largest botnet ever.” According to the indictment, Wang allegedly spread his malware through Virtual Private Network programs and pay-per-install services, which allowed him to manage and control the roughly 150 servers.

Paying customers were then given access to proxied IP addresses that were linked to the hacked devices, the indictment said. Cybercriminals used those addresses to hide their locations and “anonymously commit a wide array of offenses,” the Department of Justice alleged.

Advertisement

“These offenses including financial crimes, stalking, transmitting bomb threats and threats of harm, illegal exportation of goods, and receiving and sending child exploitation materials,” according to the department. “Since 2014, 911 S5 allegedly enabled cybercriminals to bypass financial fraud detection systems and steal billions of dollars from financial institutions, credit card issuers, and federal lending programs.”

Specifically, the botnet targeted COVID-19 pandemic relief programs and filed an estimated 560,529 fraudulent unemployment insurance claims, according to the indictment. Federal authorities confirmed that more than $5.9 billion was stolen as a result.

The indictment further alleged that Wang had amassed about $99 million — either in cryptocurrency or fiat currency — from his sales of the infected proxied IP addresses. He used the illicit proceeds to purchase luxury assets and property.

Wang bought property in the United States, St. Kitts and Nevis, China, Singapore, Thailand, and the United Arab Emirates, according to the indictment. He also had dozens of other assets, such as luxury cars, watches, international bank accounts, and cryptocurrency wallets.

Wang was charged with conspiracy to commit computer fraud, substantive computer fraud, conspiracy to commit wire fraud, and conspiracy to commit money laundering. He faces a maximum of 65 years in prison.

Advertisement

Cybercrime, COVID fraud in the U.S.

Cybercrime is a “significant and growing threat” to the country’s national and economic security, according to the State Department. As people become more dependent on information and communication technologies, the department said more criminals continue to shift online.

Wang’s arrest also comes amid a push from federal officials for organizations to update and follow cybersecurity guidelines. Federal agencies have issued multiple advisories for cyberattacks committed by foreign groups in recent years.

In January, the FBI and Department of Justice announced that they had “disrupted a botnet of hundreds of U.S.-based small office/home office routers hijacked” by China-linked hackers. The group, known as “Volt Typhoon,” targeted critical infrastructure organizations in the United States, such as water systems and electric grids.

The surge in malicious cyber incidents coincides with the rise in online communication during the COVID-19 pandemic, according to a 2023 cyberthreat study. Citing FBI data, the study said cybercrime increased by 400% during the pandemic.

Advertisement

“Cybercriminals find the uncertainty brought by changing daily habits opportune and the increased virtual existence is converted into available attack vectors,” the study noted.

In the four years since the onset of the pandemic, the Internal Revenue Service has investigated over 1,600 tax and money laundering cases related to COVID-19 fraud potentially worth about $8.9 billion, the agency said in March. Cases included fraudulently obtained loans, credits and payments meant for U.S. workers, families and small businesses under the Coronavirus Aid, Relief and Economic Security, or CARES, Act.

Contributing: Josh Meyer, USA TODAY

News

Video: Will ICE Change Under Its New Leader?

Published

on

Video: Will ICE Change Under Its New Leader?
Markwayne Mullin, the new homeland security secretary, has promised a different approach, but how much change is likely? Our reporter Hamed Aleaziz describes what we know.

By Hamed Aleaziz, Sutton Raphael, Thomas Vollkommer, Gilad Thaler, Whitney Shefte and Alexandra Ostasiewicz

March 27, 2026

Continue Reading

News

A surprise resignation could open the door for an independent to win a Montana Senate seat

Published

on

A surprise resignation could open the door for an independent to win a Montana Senate seat

Seth Bodnar, the former president of the University of Montana, is now running for Senate as an independent

Kirk Siegler/NPR


hide caption

toggle caption

Advertisement

Kirk Siegler/NPR

BUTTE, Mont. – It’s long been an adage in Montana politics that if you’re running for office, you’d better have a float in the Butte St. Paddy’s Day Parade, which draws thousands to the mining city’s historic uptown, soaking up the nostalgia – and the Guiness. 

Here, you’re just steps from the towering old mining headframes and the one mile long and half mile wide Berkeley Pit. Now shuttered, it was  once one of the world’s largest copper deposits. 

Larry Carden, in a Notre Dame sweatshirt, never misses the parade.

Advertisement

“You’ll see a lot more boos for the Republicans than you will the Democrats, I can guarantee you that,” he says. 

That’s a nod to Butte’s long history of Democratic politics and a strong labor movement going back to around 1900, when the “Copper King” mine owners ruled Montana business and media, and bribed their way into political office. Today, Carden, who’s retired, is worried that the mega rich are again influencing politics here, and how expensive life is in his home state.

“Between health care and gas and food, and you go to the store the other day, there’s rib steaks $19.99 a pound, you know,” Carden says.  

A political group marches in the St. Patrick's Day parade in Butte, Montana, March 17 2026

A political group marches in the St. Patrick’s Day parade in Butte, Montana, March 17 2026

Kirk Siegler/NPR


hide caption

Advertisement

toggle caption

Kirk Siegler/NPR

This year’s parade followed an unusually turbulent few days in Montana’s political scene – half of its congressional delegation abruptly retired. Despite the state’s recent tilt from purple to deep red, the races for their seats could be more in play now because of the way Senator Steve Daines and Congressman Ryan Zinke, both Republicans, gave up them up and chose their successors. In Daines’ case, he withdrew his candidacy just minutes before the filing deadline. 

Advertisement

Like a lot of people in Butte, Carden is a longtime Democrat. But he says he’s grown disillusioned with party politics.

“I would rather everything be independent where there is no party designation and then you have to pay more attention to who the person actually is,” Carden says.   

New Candidate opts to go independent

That’s exactly what Seth Bodnar, a former Green Beret running for U.S. Senate, is trying to capitalize on. He joined other candidates mixed in with Irish dancing troupes and fire department floats, as he walked the parade route along Park Street shaking the occasional hand and tossing candy. 

In an interview with NPR earlier in Missoula, Bodnar, who recently resigned his post as University of Montana president, pitched what he says would be his bi-partisan appeal.

“I’m an independent,” Bondar says. “When I raised my right hand at the age of 18 and I swore an oath to this Constitution when I joined the military, not to a political party.”.

Advertisement

Person over party used to be the playbook in Montana, which some call just one long Main Street. It’s how former Senator Jon Tester used to win despite being a Democrat as the state got redder.

The day after Bodnar formally announced he was gathering signatures to get on the ballot, his long shot bid got taken a lot more seriously. 

Sen. Steve Daines, who was elected to the Senate in 2014, sent shockwaves through the state’s political scene when he announced in a video posted to X that he’d decided not to seek reelection.  

Sen. Steve Daines, R-Mont., speaks at the Senate Finance Committee confirmation hearing for Scott Bessent, President-elect Donald Trump's choice to be Secretary of the Treasury, at the Capitol in Washington, Thursday, Jan. 16, 2025.

Sen. Steve Daines, R-Mont., speaks at the Senate Finance Committee confirmation hearing for Scott Bessent, President-elect Donald Trump’s choice to be Secretary of the Treasury, at the Capitol in Washington, Thursday, Jan. 16, 2025.

Ben Curtis/AP/AP


hide caption

Advertisement

toggle caption

Ben Curtis/AP/AP

“I’m also very thankful to have served alongside President Trump and my colleagues in the Senate,” Daines said in the video. “Together we built a conservative majority on the Supreme Court, we delivered the largest tax cut in U.S. history, we unleashed American energy dominance and secured our southern border.” 
 
Daines’ late hour withdrawal presumably clears the way for his chosen successor, Kurt Alme, the U.S. Attorney for Montana until he declared his candidacy for Daines’ seat. Daines later said withdrawing earlier could have enticed a prominent Democrat like Tester to enter the race. 

Advertisement

Independent Seth Bodnar says it reminds him of the Montana of old. 

“We have direct election of senators in the United States in part because of political corruption in this state 125 years ago, Copper Kings trying to buy U.S. Senate seats,” Bodnar says. “That didn’t work back then and it’s not going to work right now.”

But Democrats say Bodnar’s entry as an independent will just split the liberal vote. 

The GOP base is angry too

“Montanans are getting very indignant about what they see as out and out dishonesty,” says Roger Koopman, a former Republican legislator and Montana Public Service commissioner from Bozeman.  

Koopman says the party establishment’s backroom dealing is a gift to Democrats and especially Seth Bodnar, who he says is a liberal running as an independent.

Advertisement

“They’re going to say, ‘hey, I’m over these Republicans playing games with me, you can’t do that and expect me to vote for you, I’m not going to vote Democrat, but here’s this guy out here who says he’s independent, let me give him a try,’” Koopman says. 

Alme has been keeping a low profile. Political pundits say that might be by design. A campaign spokesperson sent NPR this statement: “Anyone could run for this seat. Kurt is running on his record as the Trump-endorsed candidate of common sense who knows how to be tough on violent crime, dismantle drug cartels, and deliver historic tax relief. Voters will decide, and Kurt is confident in his work serving Montana and helping President Trump put America First.”

At Montana State University, political science department chair Eric Austin says he expects party tensions will cool and Republicans will rally around their nominee by November. 

“I think in part that speaks to the changes in the electorate in the state,” Austin says. “As the state has become more red, people have more strongly affiliated themselves with the Republican Party and less as independents.” 

However, Austin says the midterms will be a referendum on President Trump and there’s growing economic anxiety in Montana. Farmers are getting hurt by Trump’s tariffs. His Iran War has sent fertilizer prices soaring, raised interest rates and the cost of gas. 

Advertisement

Back in Butte, at the St. Paddy’s Day parade, longtime Democratic activist Evan Barrett says there’s a resurgence in populist resentment in Montana. 

Longtime Montana Democratic party activist Evan Barrett at the St. Patrick's Day parade in Butte, Montana, March 17 2026

Longtime Montana Democratic party activist Evan Barrett at the St. Patrick’s Day parade in Butte, Montana, March 17 2026

Kirk Siegler/NPR


hide caption

toggle caption

Advertisement

Kirk Siegler/NPR

“It’s almost like a repetition of the past,” says Barrett, a one time economic aide to former Governor Brian Schweitzer.  

Ducking into an old storefront to take a break from the spectacle of the parade, Barrett told NPR there’s a feeling in the electorate that a lot of outside money is coming into influence politics, but not staying in Montana and being invested into things like schools. 

“So this is a really wild and different year,” Barrett says. “Anybody that tells you they know what’s gonna happen, well, be a bit skeptical.” 

Advertisement

President Trump has endorsed last minute Senate candidate Kurt Alme but it’s not clear what kind of effect that might have on voters in November. 

Continue Reading

News

Video: Savannah Guthrie Says She Believes Her Mother Was Taken for Ransom

Published

on

Video: Savannah Guthrie Says She Believes Her Mother Was Taken for Ransom

new video loaded: Savannah Guthrie Says She Believes Her Mother Was Taken for Ransom

transcript

transcript

Savannah Guthrie Says She Believes Her Mother Was Taken for Ransom

Savannah Guthrie spoke on the “Today” show in her first interview since her mother, Nancy Guthrie, was abducted from her home near Tuscon, Ariz.

“The ransom note, notes for ransom requests came. Did you believe those to be real?” “The two notes that we received that we responded to — I tend to believe those are real.” “Really?” “We still don’t know. Honestly, we don’t know anything. We don’t know anything. So I don’t know that it’s because she’s my mom. But yeah, that’s probably — which is too much to bear to think that I brought this to her bedside, that it’s because of me. And I just say, I’m so sorry, Mommy. I’m so sorry. We need answers. We cannot be at peace without knowing. And someone can do the right thing. And it is never too late to do the right thing.”

Advertisement
Savannah Guthrie spoke on the “Today” show in her first interview since her mother, Nancy Guthrie, was abducted from her home near Tuscon, Ariz.

By Christina Kelso

March 26, 2026

Continue Reading

Trending