A 35-year-old Chinese man has been apprehended in Singapore, with authorities seizing millions of dollars in assets, including cars, watches, and real estate, as part of a major crackdown on a global cybercriminal network accused of defrauding the US government of billions of dollars, announced the Justice Department on Wednesday.

YunHe Wang, the Chinese suspect, stands accused of aiding in the establishment of a vast network of infected computers, known as a botnet, which was allegedly utilized for various illicit activities such as bomb threats, distributing child exploitation materials, and perpetrating financial fraud. Among these schemes, the botnet was purportedly employed to submit tens of thousands of fraudulent applications for federal relief during the COVID-19 pandemic, resulting in approximately $5.9 billion in losses, as stated by the Departments of Justice and Treasury.

The alleged cybercriminal activities and the extravagant lifestyle it facilitated were described as resembling a storyline from a movie by Matthew Axelrod, a senior official from the US Commerce Department involved in the investigation.

During the operation, law enforcement confiscated approximately $4 million worth of luxury items, including watches, sports cars like Ferrari and Rolls-Royce, and $30 million in real estate properties across various regions such as East Asia, the Middle East, the Caribbean, and the US, revealed Brett Leatherman, a senior FBI official. Wang purportedly utilized his earnings from renting out the botnet to invest in properties in these locations, according to an indictment unveiled in the US District Court for the Eastern District of Texas.

The Justice Department noted that authorities in Singapore and Thailand collaborated with the FBI on the operation.

While no legal representation was listed for Wang in court records, Leatherman disclosed that the US government was seeking his extradition to the US, and investigations into other potential suspects were ongoing.

Wang and his alleged accomplices within the criminal network reportedly utilized virtual private networking (VPN) to disseminate their malicious code, infecting over 19 million distinct IP addresses worldwide, including more than 600,000 in the US, according to prosecutors. IP addresses serve as unique identifiers for individual devices on the internet.

These latest charges represent yet another instance of opportunistic fraud that has proliferated across the US since the onset of the COVID-19 pandemic over four years ago. Fraudsters exploited opportunities presented by the more than $2 trillion federal economic stimulus package, known as the CARES Act, enacted in 2020, which the botnet is said to have targeted.

The severity of the situation prompted the Secret Service to appoint a senior official as the National Pandemic Fraud Recovery Coordinator in an effort to recoup a portion of the substantial sums that were pilfered.