Google has filed a lawsuit against 25 individuals it claims are behind a massive "staggering" scam text operation using the Lighthouse phishing-as-a-service platform. The operation, which allegedly targeted millions of Americans and people in over 120 countries, is believed to have made more than $1 billion from its brazen schemes.
At the heart of the operation is the Lighthouse platform, a software developed by Chinese cybercriminals that is sold as a subscription service to less technically capable fraudsters. The platform offers ready-made phishing templates, fake websites, and backend management tools, allowing scammers to steal bank and card information, collect usernames, passwords, and one-time codes, and deliver large-scale messages via iMessage and Google Messages' RCS channels.
According to research by cybersecurity firm Silent Push, the Lighthouse network targeted people in at least 121 countries over a 20-day period, with an estimated 200,000 scam websites linked back to the network. The number of scam messages sent each day is believed to be "significantly higher" than 100,000.
Google claims that the 25 individuals it is suing have participated in the management or operation of the Lighthouse scheme, and have used the platform to target millions of Americans with texts. The company alleges that these scammers have violated multiple legal statutes, including those related to identity theft and spamming.
The lawsuit aims to give Google and other companies the ability to dismantle the Lighthouse operation more broadly, and seeks a temporary restraining order and permanent injunctions against the individuals involved. By filing this case in the US, Google hopes to have a deterrent impact outside of the US borders, and to enable others to do the same.
However, experts warn that it is possible that the groups behind the Lighthouse network will adapt to the legal action. The software has been updated multiple times with new capabilities being added regularly, and frequent additions of new phishing templates are expected.
The wider Chinese-speaking smishing actors and fraud ecosystem are continually evolving and growing, says Ford Merrill, a security researcher who tracks the operations at SecAlliance. They have developed their tools to add stolen card details to digital wallets on iPhones and Android phones, and use a range of methods to send scam messages, including phone arms and SMS blasters.
The rise of scams has become a major global problem that requires continued monitoring and action.
At the heart of the operation is the Lighthouse platform, a software developed by Chinese cybercriminals that is sold as a subscription service to less technically capable fraudsters. The platform offers ready-made phishing templates, fake websites, and backend management tools, allowing scammers to steal bank and card information, collect usernames, passwords, and one-time codes, and deliver large-scale messages via iMessage and Google Messages' RCS channels.
According to research by cybersecurity firm Silent Push, the Lighthouse network targeted people in at least 121 countries over a 20-day period, with an estimated 200,000 scam websites linked back to the network. The number of scam messages sent each day is believed to be "significantly higher" than 100,000.
Google claims that the 25 individuals it is suing have participated in the management or operation of the Lighthouse scheme, and have used the platform to target millions of Americans with texts. The company alleges that these scammers have violated multiple legal statutes, including those related to identity theft and spamming.
The lawsuit aims to give Google and other companies the ability to dismantle the Lighthouse operation more broadly, and seeks a temporary restraining order and permanent injunctions against the individuals involved. By filing this case in the US, Google hopes to have a deterrent impact outside of the US borders, and to enable others to do the same.
However, experts warn that it is possible that the groups behind the Lighthouse network will adapt to the legal action. The software has been updated multiple times with new capabilities being added regularly, and frequent additions of new phishing templates are expected.
The wider Chinese-speaking smishing actors and fraud ecosystem are continually evolving and growing, says Ford Merrill, a security researcher who tracks the operations at SecAlliance. They have developed their tools to add stolen card details to digital wallets on iPhones and Android phones, and use a range of methods to send scam messages, including phone arms and SMS blasters.
The rise of scams has become a major global problem that requires continued monitoring and action.