Google Sues “Lighthouse” Over Massive Phishing Attacks

That text message you got about a “stuck package” from USPS, or an “unpaid road toll” notice, isn’t just random spam it’s become the signature move of an international criminal outfit that’s managed to swindle millions.Today, Google is launching a major campaign to turn the tide: filing a lawsuit to dismantle the infamous “Lighthouse” phishing-as-a-service operation and throwing its support behind groundbreaking bipartisan bills in Congress aimed at combatting the rising tide of digital scams.“Lighthouse” is no ordinary criminal operation. Marketed as a phishing-as-a-service (PhaaS) kit, Lighthouse offers bad actors turnkey tools to launch sophisticated “smishing” (SMS phishing) campaigns at scale.These campaigns typically impersonate trusted brands like E-Z Pass, urging recipients to click convincing links and enter sensitive details ranging from passwords to banking credentials on expertly spoofed sites.Google has identified at least 107 compelling website templates that illegally feature its trademarks, mimicking legitimate Google sign-in screens to deceive users.And the scale is staggering: Lighthouse’s kit has played a role in targeting over 1 million victims across more than 120 countries.In the U.S. alone, damages are astronomical criminals have stolen data for an estimated 12.7 million to 115 million credit cards. Since 2020, instances of these attacks have risen fivefold, signaling the explosive growth of PhaaS operations.Google’s lawsuit targets the very core of this infrastructure, aiming to neutralize Lighthouse by invoking a host of statutes the Racketeer Influenced and Corrupt Organizations (RICO) Act, the Lanham Act, and the Computer Fraud and Abuse Act.These measures are intended to shut down the operations for good, curbing financial damage for ordinary users and organizations alike.Pushing for Legislative SolutionsWhile legal action stops individual bad actors, the broader battle against cyber scams necessitates stronger public policies.Google is now publicly backing several pivotal, bipartisan bills being considered by Congress. These measures aim to outpace the rapidly evolving threat landscape:Guarding Unprotected Aging Retirees from Deception (GUARD) Act: Empowers law enforcement to use federal grants in investigating scams and financial fraud specifically targeting retirees.Foreign Robocall Elimination Act: Proposes a focused task force to block foreign-generated illegal robocalls before they can reach U.S. consumers.Scam Compound Accountability and Mobilization (SCAM) Act: Develops a national strategy to counter scam compounds, toughens sanctions, and bolsters support for trafficking victims within these criminal networks.“We urge Congress to enact these critical bills,” Google emphasized, noting that robust legislation is an essential weapon against a global tsunami of cyber fraud.Rolling Out Smarter DefensesGoogle isn’t resting at litigation and policy. New protective features are being deployed across Google services, including AI-driven scam detection in Google Messages to flag suspicious links in real time, with a particular focus on common ruses like fake tolls or delivery scams.Tools like expanded account recovery options and in-app safety notifications are being rolled out to make it easier for users to recover compromised accounts and recognize warning signs.Additionally, Google continues to enhance public education, equipping users worldwide with the knowledge needed to spot and avoid scams.From courtroom battles to legislative advocacy and next-gen technology rollouts, Google is taking the fight to digital criminals on every front.But this is not a fight that any single entity can win alone. As Google fortifies its systems and calls for stronger legal protections, the message is clear: safeguarding the digital world is a shared responsibility with smarter tools and vigilant communities, together we can make cyberspace a far less hospitable place for criminals.Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Based on reporting by GBHackers.