480,000 phishing emails sent from a PC hidden behind a fridge in a Japanese hotel room

A computer, found hidden behind a fridge in a Japanese hotel room, was responsible for sending around 480,000 phishing emails, Hackread reports. The computer was placed there by a Chinese couple who lived locally, and the pair have now been arrested for both the hidden phishing PC and a separate slew of purchases that were made using stolen credit card details. Ye Jiafeng, 39, and his wife, Shen Qi, 39, now face multiple charges including fraudulent obstruction of business and trespass as well as computer fraud.

The scam began on 15 May, 2025, when Ye connected the computer to hotel Wi-Fi and then hid it behind a fridge. There it stayed, sending around 480,000 emails. When it was discovered, the machine had around 2.4 million email addresses, presumably just waiting to be phished. The emails claimed to be from credit card companies and sent unsuspecting recipients to fake websites in an attempt to capture their credit card information. It's believed that the computer was administered remotely, allowing it to remain in situ without any in-person maintenance required.

Ultimately, the computer would likely have remained in place if the recipient of one of the phishing emails hadn't reached out to the hotel. The hotel's IP address was found in metadata linked to the messages, and staff discovered the computer before reporting it to the police. Police are still investigating whether the two scammers were the brains of the operation or simply working for someone else.

While phishing was the couple's chosen scam this time around, it isn't their first foray into using technology to part victims from their cash. Ye and Shen are claimed to have used credit card details stored on a smartphone to buy items in Kobe. But that wasn't the only phone that they had — media reports claim that police found 74 of them at their home, and the couple had spent 10 million yen (around $63,000) of other people's money using stolen card details since 2024. It's unknown whether the phones found by police account for all of those that were used, or if there were others that have yet to be identified.

Phishing has long been a lucrative option for criminals around the globe, but it has also spawned a spin-off industry recently. A China-based phishing-as-a-service operation was dismantled by the FBI earlier this year. The service made it easier for criminals to create scam sites using AI and is believed to have been responsible for almost $2 billion in losses and 3.87 million stolen credit cards.

Follow Tom's Hardware on Google News, or add us as a preferred source, to get our latest news, analysis, & reviews in your feeds.