Governance, Risk and Compliance, Threat Intelligence

Operators of 911 S5 residential proxy service subjected to US sanctions

United States Department of the Treasury seal

Chinese nationals Yunhe Wang, Jingping Liu, and Yanni Zheng have been sanctioned by the U.S. Treasury Department for operating the residential proxy service 911 S5, which was a botnet comprised of over 19 million residential IP addresses that had been used to support various cybercrime groups' COVID-19 relief scams and bomb threats, Ars Technica reports.

Officials of the Treasury Department have also sanctioned Thailand-based Tulip Biz Pattaya Group Company Limited, Lily Suites Company Limited, and Spicy Code Company Limited, all of which have been involved with Wang.

"Treasury, in close coordination with our law enforcement colleagues and international partners, will continue to take action to disrupt cybercriminals and other illicit actors who seek to steal from US taxpayers," said Treasury Department Under Secretary Brian Nelson.

Such a development follows a Mandiant report detailing Chinese state-sponsored threat actors' mounting utilization of operational relay box networks, or proxy networks of botnets, for cyberespionage efforts.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.