--- title: 13M+ Emails Sent in Tech Support Scam Targeting Users,... description: A large-scale tech support scam campaign targeting Japan sent over 13 million emails across 165 days (mid-December 2025 to May 2026), using more than 240,000... canonical: https://daily.dev/posts/13m-emails-sent-in-tech-support-scam-targeting-users-organizations-in-japan-xjubedkrl twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: 13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan | daily.dev og:description: A large-scale tech support scam campaign targeting Japan sent over 13 million emails across 165 days (mid-December 2025 to May 2026), using more than 240,000... og:url: https://daily.dev/posts/13m-emails-sent-in-tech-support-scam-targeting-users-organizations-in-japan-xjubedkrl og:image: https://api.daily.dev/og/posts/xjuBEdkRl.png og:image:alt: 13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # 13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan **[Trend Micro](https://daily.dev/sources/trendmicro)** · 15 min read · 0 upvotes · 0 comments ## Summary A large-scale tech support scam campaign targeting Japan sent over 13 million emails across 165 days (mid-December 2025 to May 2026), using more than 240,000 IP addresses and 33,000 disposable fake alert sites hosted on Microsoft Azure Blob Storage. The campaign evolved from generic fake security warnings to workplace-themed lures (performance reviews, salary revisions, security audits), suggesting a shift toward enterprise targets for larger financial payouts. Delivery infrastructure likely relied on hijacked IoT devices, particularly MikroTik routers. Only 11 distinct phone numbers were reused across thousands of sites. Recommended defenses include enforcing SPF/DKIM/DMARC, strengthening email gateways, restricting remote access software, monitoring outbound international calls, and employee training. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Cybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing Campaign](https://daily.dev/posts/cybercriminals-abuse-google-cloud-email-feature-in-multi-stage-phishing-campaign-gra51ietd) · The Hacker News · 0 upvotes · 0 comments - [Kaspersky spam and phishing report for 2025](https://daily.dev/posts/kaspersky-spam-and-phishing-report-for-2025-c1velzj6b) · Securelist · 2 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#phishing](https://daily.dev/tags/phishing) [View this post on daily.dev](https://daily.dev/posts/13m-emails-sent-in-tech-support-scam-targeting-users-organizations-in-japan-xjubedkrl) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan","url":"https://daily.dev/posts/13m-emails-sent-in-tech-support-scam-targeting-users-organizations-in-japan-xjubedkrl","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/13m-emails-sent-in-tech-support-scam-targeting-users-organizations-in-japan-xjubedkrl"},"datePublished":"2026-07-23T22:07:15.807Z","dateModified":"2026-07-24T00:32:03.123Z","description":"A large-scale tech support scam campaign targeting Japan sent over 13 million emails across 165 days (mid-December 2025 to May 2026), using more than 240,000...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/83df48fa6469291f6304a3b3dcb0a3c4?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/83df48fa6469291f6304a3b3dcb0a3c4?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Trend Micro","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Trend Micro","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/4f418451d6564f28bd27a89e0174d948","url":"https://daily.dev/sources/trendmicro"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/13m-emails-sent-in-tech-support-scam-targeting-users-organizations-in-japan-xjubedkrl","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,phishing","timeRequired":"PT15M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Trend Micro","item":"https://daily.dev/sources/trendmicro"},{"@type":"ListItem","position":3,"name":"13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan"}]} ```