Man allegedly behind global malware network continues to resist extradition from S’pore
Sign up now: Get ST's newsletters delivered to your inbox
A screengrab of one of the websites that Wang Yunhe used to sell access to IP addresses.
SCREENGRAB: INTERNET ARCHIVE
Follow topic:
SINGAPORE - A man wanted by the US for his alleged role in the world’s largest botnet
Wang Yunhe is in remand and appeared in court on June 6 via video-link before District Judge Tan Jen Tse.
When the judge asked him if he consented to the US’ extradition request, Wang, who spoke through a Mandarin interpreter, said he did not.
He did not explain why he did not want to be extradited.
This is the second time Wang has stated his refusal to be extradited to the US, after his first objection at a court mention on May 31
Changes were made to the Extradition Act in April 2022 to allow fugitives to consent to their extradition
This is in line with international practice, to save state resources and prevent the fugitive from being detained longer than necessary in Singapore.
Even if a fugitive does not consent to his extradition, he can still be ordered to do so if the court is satisfied that certain conditions are met.
On June 6, State Counsel Anupriya A. Daniel asked for Wang to be remanded for seven days, according to the Extradition Act. The law stipulates that fugitives can be remanded for no longer than seven days at any one time.
Wang’s defence lawyer, Mr Ng Yuan Siang, said he would also require an adjournment of the same duration to take instructions from his client.
Wang’s case will be heard again on June 12.
In an earlier statement, the US Department of Justice (DOJ) said Wang’s alleged offences had allowed cyber criminals to steal billions of dollars through financial fraud, identity theft and other crimes.
He was arrested in Singapore on May 24 in a multi-jurisdiction operation led by the DOJ.
Wang had allegedly worked with others between 2014 and July 2022 to create and disseminate the 911 S5 Botnet to millions of home-based Windows computers across the world.
A botnet refers to a network of computers infected by malware that is under the control of a single attacking party.
The DOJ said more than 19 million internet protocol (IP) addresses – unique characters that identify each computer – ended up in the “world’s largest botnet ever”.
US officials said Wang allegedly sold access to the infected computers to cyber criminals.
An archived version of one of the websites selling the IP addresses showed that it cost US$28 (S$38) to purchase 150 addresses. Users could pay through several options, including Bitcoin, Alipay and WeChat Pay.
The DOJ said Wang, who holds St Kitts and Nevis citizenship, allegedly received US$99 million from cyber criminals who tapped his network from 2018 to July 2022.
He allegedly used the money to buy 21 properties across the US, St Kitts and Nevis, Singapore, Thailand, China and the United Arab Emirates.
He also has business ties in Singapore, with records showing he was appointed as a director in two active companies on Jan 15, 2022 – Gold Click, a holding company, and Universe Capital Management, a management consultancy firm.
US court documents described the companies Wang registered as shell companies that he allegedly used to conceal his crimes.
Dozens of his assets and properties may be seized, the DOJ said.
They include a Singapore-registered 2022 Ferrari F8 Spider, bank accounts with CIMB Bank, Citibank Singapore and banks in Thailand, a condominium unit in Angullia Park, and Patek Philippe and Audemars Piguet watches.
Wang faces up to 65 years in a US prison if convicted.
