Google has taken legal action against a cybercriminal group in China for distributing ‘phishing for dummies’ kits, known as ‘Lighthouse,’ which facilitate large-scale phishing campaigns aimed at extracting sensitive information from unsuspecting victims worldwide.
These kits provide fraudsters with tools to create fake websites, set up domains, and craft deceptive templates to trick individuals into revealing personal data such as passwords, credit card details, and banking information. The attacks often start with text messages claiming overdue toll fees or package delivery charges, sometimes disguised as legitimate Google ads.
Google highlighted the extensive criminal network behind these scams, operating through platforms like YouTube and Telegram channels. The schemes have already defrauded more than a million people across 121 countries, resulting in financial losses exceeding a billion dollars.
Source: Ars Technica