logo

Chinese national arrested for operating proxy service linked to billions in cybercrime 

ID: 3ca2ac01-b645-55be-a1bd-aeef801a5944

STIX ID: report--3ca2ac01-b645-55be-a1bd-aeef801a5944

Feed Name: CyberScoop

Threat Score
85/100

Date Published: 2024-05-29

Date Updated: 2026-04-21

Author: AJ Vicens

...
...

A U.S. Department of Justice and international law enforcement operation targeted and dismantled a residential proxy service called 911 S5 (later rebranded CloudRouter) that installed malware on millions of Windows PCs to sell compromised IP addresses to criminals. The service, operated by YunHe Wang, facilitated ransomware, fraud, cyber attacks, and other crimes, generated roughly $99 million for the operator, and provided access to 19 million unique IPs (including ~614,000 in the U.S.); authorities arrested the operator, seized domains, assets, and cryptocurrency wallets, and sanctioned associates.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.