Chinese man arrested for allegedly running ‘largest ever’ malware network

US officials say army of 19 million infected computers enabled fraud, identity theft and child exploitation.

Authorities in the United States have announced the dismantling of a global network of 19 million infected computers used to facilitate and cover up cybercrimes including fraud, identity theft and child exploitation.

Yunhe Wang, 35, was arrested on Friday for allegedly running the botnet known as “911 S5”, the US Department of Justice said on Wednesday.

Wang is alleged to have run the botnet comprising infected IP addresses in more than 190 countries over an eight-year period from 2014, generating millions of dollars offering cybercriminals access to the network for a fee.

Wang is alleged to have generated $99m through the scheme, using his illicit gains to buy luxury cars and real estate in the US, St Kitts and Nevis, China, Singapore, Thailand, and the United Arab Emirates.

Wang allegedly propagated his malware through Virtual Private Network (VPN) programs, such as MaskVPN and DewVPN, and pay-per-install services that bundled his malware with other program files, including pirated versions of licensed software, according to court documents.