--- title: "13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan" url: https://daily.dev/posts/13m-emails-sent-in-tech-support-scam-targeting-users-organizations-in-japan-xjubedkrl source_url: https://www.trendmicro.com/en_us/research/26/g/tech-support-scams-targeting-japan.html type: article source: "Trend Micro" published: 2026-07-23T22:07:15.807Z updated: 2026-07-24T00:32:03.123Z tags: ["security", "phishing"] reading_time: 15 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # 13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan **[Trend Micro](https://daily.dev/sources/trendmicro)** · 15 min read · 0 upvotes · 0 comments ## Summary A large-scale tech support scam campaign targeting Japan sent over 13 million emails across 165 days (mid-December 2025 to May 2026), using more than 240,000 IP addresses and 33,000 disposable fake alert sites hosted on Microsoft Azure Blob Storage. The campaign evolved from generic fake security warnings to workplace-themed lures (performance reviews, salary revisions, security audits), suggesting a shift toward enterprise targets for larger financial payouts. Delivery infrastructure likely relied on hijacked IoT devices, particularly MikroTik routers. Only 11 distinct phone numbers were reused across thousands of sites. Recommended defenses include enforcing SPF/DKIM/DMARC, strengthening email gateways, restricting remote access software, monitoring outbound international calls, and employee training. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Cybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing Campaign](https://daily.dev/posts/cybercriminals-abuse-google-cloud-email-feature-in-multi-stage-phishing-campaign-gra51ietd) · The Hacker News · 0 upvotes · 0 comments - [Kaspersky spam and phishing report for 2025](https://daily.dev/posts/kaspersky-spam-and-phishing-report-for-2025-c1velzj6b) · Securelist · 2 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#phishing](https://daily.dev/tags/phishing) [View this post on daily.dev](https://daily.dev/posts/13m-emails-sent-in-tech-support-scam-targeting-users-organizations-in-japan-xjubedkrl)