Google has filed a lawsuit against a group known as Lighthouse, which is allegedly behind the distribution of spammy texts containing phishing attempts. The tech company accuses the defendants associated with Lighthouse of providing a ‘phishing for dummies’ kit to cybercriminals for executing large-scale phishing campaigns.
According to the lawsuit, Lighthouse reportedly offered SMS and e-commerce software equipped with hundreds of templates mimicking websites of financial institutions or government entities. These deceptive sites aimed to deceive users into sharing sensitive information. Within a short period, Lighthouse allegedly created 200,000 fraudulent websites that attracted over a million potential victims, potentially compromising millions of credit cards in the US.
One concerning detail from the lawsuit is the alleged tracking of users’ keystrokes, ensuring the compromise of information even if users reconsider sharing it. The scheme involved scammers sending texts, directing recipients to spoofed pages resembling legitimate services, and harvesting personal and payment details.
This legal battle highlights the tech-driven fight against sophisticated phishing operations that exploit SMS and e-commerce channels to target unsuspecting individuals. Google’s efforts to dismantle such Phishing-as-a-Service networks underscore the importance of combating cybercrime and protecting user data in the digital age.
Source: The Verge