“Like stealing candy from a baby,” arrested teen says of his phishing efforts