Google Sues “Lighthouse” Over Massive Phishing Attacks

That text message you got about a “stuck package” from USPS, or an “unpaid road toll” notice, isn’t just random spam it’s become the signature move of an international criminal outfit that’s managed to swindle millions.

Today, Google is launching a major campaign to turn the tide: filing a lawsuit to dismantle the infamous “Lighthouse” phishing-as-a-service operation and throwing its support behind groundbreaking bipartisan bills in Congress aimed at combatting the rising tide of digital scams.

“Lighthouse” is no ordinary criminal operation. Marketed as a phishing-as-a-service (PhaaS) kit, Lighthouse offers bad actors turnkey tools to launch sophisticated “smishing” (SMS phishing) campaigns at scale.

These campaigns typically impersonate trusted brands like E-Z Pass, urging recipients to click convincing links and enter sensitive details ranging from passwords to banking credentials on expertly spoofed sites.

Google has identified at least 107 compelling website templates that illegally feature ...