Google has initiated legal action against an unidentified group referred to as Lighthouse, which allegedly operates a Phishing-as-a-Service network. The lawsuit accuses Lighthouse of providing tools designed for cybercriminals who might not have the skills necessary for large-scale phishing operations. According to the complaint, this group charges a monthly fee for access to SMS and e-commerce software, offering templates for websites that closely mimic those of financial institutions and government agencies.
The lawsuit outlines that over a period of just 20 days, Lighthouse purportedly created 200,000 fraudulent websites that collectively targeted over one million potential victims. Google estimates that this scheme may have compromised between 12.7 million and 115 million credit card details in the United States. The phishing tactics allegedly include messages claiming unpaid tolls or delivery fees, leading users to counterfeit websites that capture sensitive personal and payment information. Google asserts that the sites are also able to track keystrokes, capturing data even if users reconsider their actions.
The company seeks to dismantle Lighthouse by claiming violations of the Racketeer Influenced and Corrupt Organizations (RICO) Act, as well as laws related to fraud and trademark infringement. Google has not yet identified the members of this organization but suggests that they may be based in China. There are currently 25 Doe defendants listed in the suit, representing an estimated number of individuals involved.
Google aims to have the court declare the activities of Lighthouse illegal, facilitating further action by other tech companies and law enforcement. In addition to the lawsuit, Google is advocating for three federal bills intended to enhance efforts against such fraudulent schemes. The company acknowledges that combating such sophisticated networks will require consistent effort.
Source: https://www.theverge.com/news/818554/google-lighthouse-text-spam-lawsuit