US sanctions 3 individuals, 3 entities related to cybercrime network

The US Treasury Department announced Tuesday it imposed sanctions on three individuals and three entities that are related to a cybercrime network.

Yunhe Wang, Jingping Liu and Yanni Zheng are designated for their activities associated with the malicious botnet tied to the residential proxy service known as 911 S5, it said in a statement.

"These individuals leveraged their malicious botnet technology to compromise personal devices, enabling cybercriminals to fraudulently secure economic assistance intended for those in need and to terrorize our citizens with bomb threats," said Under Secretary Brian Nelson.

Spicy Code Company Limited, Tulip Biz Pattaya Group Company Limited and Lily Suites Company Limited were also sanctioned for being owned or controlled by Wang.

The 911 S5 botnet was a malicious service that compromised victim computers and allowed cybercriminals to proxy their internet connections through the computers, according to the statement.

The botnet compromised approximately 19 million IP addresses and facilitated the submission of tens of thousands of fraudulent applications related to the Coronavirus Aid, Relief and Economic Security Act programs by its users, resulting in the loss of billions of dollars to the US government, it added.

"Cybercriminals covet stolen residential IP addresses to obfuscate malicious activity, particularly when carrying out credit card theft," said the statement. "911 S5 essentially enables cybercriminals to conceal their originating location, effectively defeating fraud detection systems."