Google has filed a lawsuit against a cybercrime network known as Lighthouse, accusing it of running a large-scale phishing service that helped criminals steal personal and financial information from millions of people.
According to the company, Lighthouse created what it calls a “phishing-for-dummies” kit that made it easy for anyone to launch sophisticated scams without having advanced technical skills.
Google’s lawsuit says Lighthouse charged its users a monthly fee to access tools that could send fake text messages and build fraudulent websites that looked like legitimate services, such as banks, toll collection systems, or government agencies. These fake sites were designed to trick victims into entering sensitive information like passwords, payment details, and credit card numbers.
The scale of the operation was alarming. In just 20 days, Lighthouse was allegedly used to create more than 200,000 fake websites, targeting over one million people. Google estimates that between 12.7 million and 115 million credit cards in the United States may have been compromised as a result of these scams. The company also revealed that the fake pages tracked users’ keystrokes, meaning personal details could be stolen even if the victim changed their mind before submitting the form.
The phishing network reportedly used Google’s name and logo to make its scams appear more trustworthy. In some cases, victims received fake text messages pretending to be from the United States Postal Service, claiming a small fee was needed to complete a delivery. The messages linked to fake USPS pages where people were asked to enter their personal and payment information. Lighthouse also created similar fake sites imitating toll payment systems, financial institutions, and retail stores, many of which included Google logos to trick victims.
Google is suing the group under the Racketeer Influenced and Corrupt Organizations Act, as well as for fraud and trademark infringement. The company says Lighthouse damaged its brand by using its logo on fake sites designed to steal people’s information. While Google does not yet know who the people behind Lighthouse are, it believes they are based in China and has listed 25 unnamed defendants in its legal filing.
The lawsuit is meant not only to stop Lighthouse but also to encourage other technology companies and law enforcement agencies to take similar action. Google’s General Counsel, Halimah DeLaine Prado, told The Verge that the company hopes the court will declare Lighthouse’s activities illegal, which could make it easier for others to take down similar operations.
Alongside the legal battle, Google is supporting several new U.S. federal bills aimed at tackling scams like this. These include the GUARD Act, which funds local law enforcement to fight scams targeting older adults, the Foreign Robocall Elimination Act, which works to stop illegal overseas robocalls, and the SCAM Act, which targets transnational criminal networks involved in online fraud.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
DeLaine Prado said Google will continue using its resources to fight cybercrime and protect users. She explained that companies have a responsibility to act when they can make a difference, and Google plans to keep playing its part in stopping online scams that put millions of people at risk.
