In Japan, pet fish gained access to their owner's account in the Nintendo Switch online store and replenished its balance using a credit card. "Cybercrime" was committed right during the broadcast on YouTube. Hundreds of spectators watched as the little fish "stole the identity" of their owner while he was away.
It all started with the fact that the owner of the YouTube channel "Mutekimaru Channel" decided to conduct an experiment. He wondered if his pet fish would be able to play Pokémon games on Nintendo Switch on their own. To do this, a Japanese YouTuber set up a webcam and pointed it at the aquarium. Special motion-tracking software followed the fish as they swam across an overlay grid that matched the controller's keys. If some fish stopped in one of the cells, this action was recorded and transmitted to the console.
The author of the channel has already conducted a similar experiment before. In 2020, his fish successfully completed Pokémon Sapphire in 3195 hours, while a human would have completed it in about half an hour.
This time, things didn't quite go according to plan. The "identity theft" occurred when the owner of the "cybercriminals" was not at home. The game was running smoothly, the fish had already won several battles, but at the 1144 hour mark, the game crashed. And since the YouTuber was not around, there was no one to correct the situation. The system continued to register commands from the fish already out of the game.
In the process, the "hackers" opened the Nintendo eShop and added 500 Yen to the profile balance. What's more, the fish also revealed the owner's credit card information to all viewers of the stream.
The fish then managed to use some of the YouTuber's accumulated reward points to buy a new profile picture, download a Nintendo64 emulator, and change the account name from "Mutekimaru" to "ROWAWAWAWA¥".
The orgy went on for about seven hours before the owner of the fish finally returned home and turned off the controller. The "victim" of the scam contacted Nintendo and explained what had happened, asking for a refund of his 500 Yen. Oddly enough, Nintendo granted the request.
As a result, the YouTuber lost only 10 points for buying a profile avatar and his card data. The card was probably already re-issued so that no one could use it. It remains to be hoped that the hero of this story does not hold a grudge against his pets.