The United States has designated three nationals from the People's Republic of China for activities associated with a malicious botnet known as 911 S5. Additionally, three entities located in Thailand have been identified for being owned or controlled by one of these individuals.
Cybercriminals have utilized the 911 S5 botnet to compromise victims' computers and obscure their digital tracks, making it appear that their cybercrimes originated from the victims' systems. This has enabled widespread cyber-enabled fraud. The 911 S5 botnet has compromised approximately 19 million IP addresses and facilitated tens of thousands of fraudulent applications related to Coronavirus Aid, Relief, and Economic Security (CARES) Act programs, resulting in billions of dollars in losses.
Matthew Miller, Department Spokesperson, stated: "We are taking action today to disrupt these cybercriminals as part of a whole-of-government action and in coordination with international partners. The United States will continue to act against cybercriminals who seek to exploit our financial system and defraud U.S. taxpayers."
The Department of the Treasury's action was taken pursuant to Executive Order 13694 “Blocking the Property of Certain Persons Engaging in Significant Malicious Cyber-Enabled Activities,” as amended. For more information on this designation, see Treasury’s press release.
