Google filed a lawsuit against Smishing Triad, a Chinese cybercrime group operating since 2023. The group uses their "Lighthouse" phishing kit to send fake SMS messages impersonating delivery services like USPS, banks, and healthcare organizations.
The scam has reached over one million users across 120+ countries, with an estimated 12-115 million stolen credit cards in the US alone. Google discovered more than 100 phishing templates copying its own brand.
The lawsuit targets the group under federal racketeering and fraud laws, allowing Google to seize malicious domains and unmask the criminals' identities. Google also supports new congressional bills aimed at protecting retirees and blocking foreign robocalls.
Source: Security Week