Chinese citizens stole billions of dollars from COVID relief funds, the U.S. reports.

In the Thai resort city of Pattaya, an operation was carried out that attracted the attention of the international community. A group of scammers, consisting of three Chinese citizens, seized computers from Americans with the aim of obtaining financial resources amid the COVID-19 pandemic. As reported by Alex Willemins for Radio Free Asia, the U.S. Department of the Treasury announced sanctions against these individuals for their involvement in cybercriminal activities.

Yankhe Wang, Jinping Liu, and Yanni Zheng led the so-called 911 S5 botnet, which took control of users' computers. This allowed criminals to use the victims' internet connections to mask their actions, making it appear as if the victims themselves were committing cybercrimes. According to the ministry, this botnet controlled about 19 million IP addresses and became a tool for submitting tens of thousands of fraudulent applications for funds under the Coronavirus Aid, Relief, and Economic Security (CARES) Act implemented in 2020. As a result, several billion dollars were improperly allocated.

Additionally, it is claimed that computers taken over by the botnet were used for bomb threats across the United States in July 2022. 35-year-old Yanghe Wang is considered the leader of this criminal scheme, while 58-year-old Jinping Liu was an accomplice responsible for laundering funds using cryptocurrency.

The property they are in is described as "a model of luxurious living on the tranquil shores of Pattaya." 50-year-old Yanni Zheng apparently managed the main company of Yanghe Wang, known asSpicy Code Company Limitedand was related to the acquisition of real estate, including elite beachfront properties in Thailand. She is registered as residing south of Pattaya, in the Sattahip area. In addition, all three obtained citizenship of the Caribbean nation of Saint Kitts and Nevis in May 2022.

In addition to these three, the Ministry of Finance has also imposed sanctions onSpicy Code Company Limitedand two other companies associated with Yanhai Wang:Tulip Biz Pattaya Group Company LimitedandLily Suites Company LimitedSanctions restrict the interaction of American citizens and companies with the specified individuals and organizations, including a ban on providing banking and other services.

These sanctions were the result of a joint investigation conducted by the U.S. Department of Commerce, the FBI, and local authorities in both Thailand and Singapore. A representative of Thailand's Ministry of Digital Economy and Society, Wong-akuéa Bunsong, declined to comment on the matter, stating that "we have not received any reports on this issue at this time." He added that their policy focuses on managing and monitoring cybercrime, emphasizing the importance of educating the country's population about cybersecurity.

Kunawat Bunreak was involved in the preparation of the material. The text was processed by Malcolm Foster. All rights reserved (1998-2024), Radio Free Asia. Used with permission from Radio Free Asia.