Google Sues to Disrupt Chinese SMS Phishing Triad
9 days ago
- #legal-action
- #phishing
- #cybersecurity
- Google is suing 25 unnamed individuals linked to the China-based phishing service 'Lighthouse'.
- Lighthouse is part of the 'Smishing Triad', responsible for millions of phishing text messages impersonating trusted brands.
- The phishing scheme involves stealing payment card data and enrolling it into mobile wallets like Apple Pay and Google Pay.
- Google's lawsuit alleges trademark violations and is pursuing the case under the RICO Act.
- Lighthouse offers over 600 phishing templates for more than 400 entities, with Google's logos featured on many.
- The operation involves multiple threat actor groups, including developers, data brokers, spammers, and theft groups.
- Fake e-commerce sites created with Lighthouse are advertised on Google and Meta platforms, furthering the scam.
- Experts believe the legal action may disrupt operations but doubt it will stop the lucrative phishing market in China.
- Most phishing sites are hosted on Chinese networks, particularly with Tencent and Alibaba.
- Despite legal efforts, experts predict the group will likely rebrand and continue operations.