Google Takes Cybercrime Group to Court Over "Smishing" Involving 115M Credit Cards: Report

Wait 5 sec.

Google has filed a lawsuit against a cybercrime groupaccused of running a global text message phishing network that targetedmillions of users by impersonating well-known brands. The company said the defendants, largely based inChina, used a phishing-as-a-service tool called “Lighthouse” to send fraudulentmessages and steal sensitive financial data, CNBC reported.Discover how neo-banks become wealthtech in London at the fmls25The defendants, described by researchers as the“Smishing Triad,” allegedly used a phishing-as-a-service kit called Lighthouseto deploy fraudulent text messages impersonating trusted organizations,including E-ZPass, the U.S. Postal Service, and even Google itself. Victims were lured to fake websites mimicking brandlogin pages, where their financial and personal information was stolen.The “Lighthouse” OperationAccording to Google’s general counsel Halimah DeLainePrado, the group “preyed on users’ trust in reputable brands,” leveragingrealistic website templates to harvest credentials. Investigators estimate thatthe syndicate has stolen between 12.7 million and 115 million credit cards inthe United States alone.Google filed the suit under the Racketeer Influencedand Corrupt Organizations (RICO) Act, the Lanham Act, and the Computer Fraudand Abuse Act (CFAA). The company seeks to dismantle both the Lighthouseplatform and the broader criminal network behind it. Internal and external investigations revealed thataround 2,500 members coordinated on public Telegram channels to develop andmaintain the Lighthouse software. The operation reportedly included separate “databroker,” “spammer,” and “theft” groups responsible for sourcing victims,sending fake texts, and monetizing stolen data. Google identified over 100 fraudulent websitetemplates using its branding alone, highlighting the scale of impersonation. Beyond the courtroom, Google is backing a trio ofbipartisan U.S. bills aimed at curbing digital fraud. These include the GUARDAct, the Foreign Robocall Elimination Act, and the Scam Compound Accountabilityand Mobilization Act. Together, the measures target illegal robocalls, scamoperations, and human trafficking links within fraud networks.Expect ongoing updates as this story evolves. This article was written by Jared Kirui at www.financemagnates.com.