480k phishing emails sent from a PC behind a fridge
Behind a refrigerator in a Japanese hotel room, a seemingly ordinary appliance became the epicenter of a massive cybercrime operation. A single computer, cleverly concealed in the kitchen, was responsible for sending out an astonishing 480,000 phishing emails, revealing a chilling intersection of domestic trickery and global digital fraud.
The setup was orchestrated by a couple, Ye Jiafeng and Shen Qi, who lived locally. Their plan began on May 15, 2025, when Ye connected the machine to the hotel Wi-Fi and hid it behind the fridge. This hidden device served as an automated digital trap, containing approximately 2.4 million email addresses, all waiting to be exploited. The emails, deceptively disguised as communications from major credit card companies, lured unsuspecting recipients to fake websites, aiming to steal sensitive financial information.
The operation’s success hinged on stealth. The scammers managed to keep the computer operational and hidden for an extended period, possibly because the hotel’s IP address was unknowingly linked to the messages. When hotel staff discovered the unusual setup, they found the hidden machine and reported the discovery to the police, kicking off an investigation into the larger network.
The criminal scheme extended beyond digital email scams. Ye and Shen also employed stolen credit card details to purchase goods in Kobe. Media reports indicate that they utilized multiple stolen phones—police discovered 74 such devices at their home—to facilitate these fraudulent transactions, spending approximately 10 million yen, or roughly $63,000, using others’ money.
While this particular case highlights the dangers of personal tech misuse, it is part of a much larger, lucrative criminal ecosystem. Phishing has long been a favorite tool for global criminals, but it has recently spawned a sophisticated industry known as phishing-as-a-service. This service allowed criminals to leverage artificial intelligence, including tools like Gemini, to rapidly create highly convincing scam sites.
The FBI recently dismantled this highly organized service, marking a significant blow to cybercrime operations. The dismantled operation is believed to have been responsible for staggering losses, amounting to nearly $2 billion, and the theft of 3.87 million credit cards worldwide. The incident underscores how digital vulnerability can be exploited, blending simple deception with advanced technology to create a truly global threat.
Credit
