Michael Clapsis: IT guru jailed for seven years for creating fake WiFi on flights, stealing intimate images

An IT boffin who hacked social media accounts to steal intimate images of women has been jailed for more than seven years after police caught him creating fake WiFi networks on domestic flights. Michael Clapsis, 44, used his extensive knowledge of computer science to harvest data from unassuming victims — including former colleagues — across a nine year period before he was spoken to by police at Perth Airport’s domestic terminal last year. Clapsis pleaded guilty to 15 charges following a complex Australian Federal Police investigation which was prompted after airline staff reported a suspicious network on a flight. It was later revealed to be an “evil twin” network Clapsis created. The father of three used a device called a black WiFi Pineapple nano pager — which is typically used for ethical cybersecurity research — to simulate the free Qantas network, tricking victims into handing over details such as social media logins or emails as they tried to gain internet access. A later search warrant at his home uncovered 58 separate folders stored on a password protected cloud platform, which identified intimate images and videos stolen from 17 adult women. The stolen data was taken between 2017 and 2023. Some of those images were nudes and were never intended to be shared with anyone else. Clapsis deleted 1752 items from his account on the data storage application the day after the raid. He also unsuccessfully tried to remotely wipe his mobile phone, despite being warned any effort to do so would be a crime. After his arrest, Clapsis pleaded guilty to 15 charges. Sentencing Clapsis to seven years and four months in jail on Friday, District Court Judge Darren Renton said it was evident he had a “clear sexual motivation” given the organisation of the files police uncovered. The files were labelled either by name or initials of victims and contained intimate images. The court was told Clapsis had also used his senior IT position at Mediterranean Shipping Company to tune into a confidential conversation over Microsoft Teams that his boss was having with the AFP. Both the AFP and his boss were unaware of his virtual presence. The prosecutor read three victim impact statement’s on Friday, including from a former colleague who is now a serving police officer. Intimate images of the victim and pictures showing her in police uniform, were found in his possession. “As a serving police officer, my identity and protection is paramount,” the victim wrote. “(The offending) has caused significant and unwarranted distress. “It has left me feeling violated and vulnerable.” The woman had only known Clapsis during her time at MSC through a professional email exchange discussing IT assistance. Judge Renton said his “crimes were far from the victimless”. “People were impacted. People were hurt,” he said. “None of theses victims knew what you had been done, so none of the victims could take steps to increase the security of the material”. “None of them knew they were putting intimate material into an environment which had a link to you.” Outside court, AFP Sergeant Peter Gelme said the sentence was a “great result”. “From the Australian public’s perspective, it’s probably a wake up call to protect your data,” he said. “A lot of people do hide behind the computer the safety of their homes, they believe that the ones and zeros don’t really matter, but, property these days is digital. “It’s not so much the TVs and lounge in people’s houses, it’s on your phones, on your computer and I think people need to be acutely aware of how they store that property.” Sgt. Gelme did not comment on whether more victims were unable to be identified in the 58 folders. Clapsis’ defence lawyer, Anthony Eyers, said his client “struggles with the shame he has brought on his family”. “It was done, not as part of a joint effort or collaboration, but by Mr Clapsis alone without the knowledge or assistance of anyone else,” he said. “(The) images were not shared in any way . . other than to be retained to be looked at as part of his private collection.” Clapsis appeared shocked by the length of sentence handed down on Friday. His wife was present during court proceedings. The 44-year-old, of Palmyra, will become eligible for parole in 2030.