Archive · 12 Nov 2025
Google Sues Cybercriminal Group Behind 'Lighthouse' Smishing Operation
Imagine some bad guys sending out lots of fake text messages.
These messages look like they come from companies you know, like for E-Z Pass.
But when you click the link, it takes you to a fake website that looks real.
This fake website tries to trick you into giving away your passwords, bank account numbers, or credit card details.
Google calls this scam 'Lighthouse' and says it has tricked over a million people around the world.
Google is now suing the people behind this scam in the United States.
They are also using smart computer programs, called AI, to help spot these fake messages and stop them before they reach you.
Google wants to protect everyone's money and information online.
Google has filed a lawsuit against a foreign cybercriminal organization operating a 'Lighthouse' smishing-as-a-service.
The smishing attacks exploit established brands by using their trademarks on fraudulent websites to steal financial information.
Google estimates over 1 million victims globally and millions of credit card numbers stolen in the US alone from these attacks.
Google is taking legal action under several US acts to dismantle the attackers' infrastructure and is using AI to detect and block scam messages.
The 'Lighthouse' operation uses fake website templates to trick users into revealing sensitive data like banking details and email credentials.
- Who
- Google vs. a foreign cybercriminal organization behind the 'Lighthouse' smishing operation
- What
- Google has filed a lawsuit and warned about a large-scale smishing operation that steals financial information by exploiting brand names and sending fraudulent text messages.
- When
- Wednesday (announcement of lawsuit and warning)
- Where
- The lawsuit was filed in the US. The smishing operation affects over 120 countries.
- Why
- To steal sensitive financial information, banking details, credit card numbers, and email credentials from unsuspecting users.
Google's Actions and Concerns
The Cybercriminal Organization's Methods
Smishing Operation
Google's Actions and Concerns
Google has filed a lawsuit and is using AI to combat the 'Lighthouse' smishing operation, which exploits established brands to steal financial information and credentials.
The Cybercriminal Organization's Methods
The 'Lighthouse' operation, described as a phishing-as-a-service, uses website templates and fraudulent links to trick users into revealing sensitive data like banking details and credit card numbers.
Impact and Scale
Google's Actions and Concerns
Google estimates over 1 million victims globally and millions of credit card numbers stolen in the US alone due to this operation.
The Cybercriminal Organization's Methods
The attackers exploit trusted brands by illegally displaying their trademarks on fraudulent websites to deceive users.
Legal and Technical Countermeasures
Google's Actions and Concerns
Google is using legal action under the RICO Act, Lanham Act, and Computer Fraud and Abuse Act to shut down the core infrastructure and is launching AI features to flag scam messages and block malicious links.
The Cybercriminal Organization's Methods
The attackers create fake websites with sign-in screens using at least 107 website templates featuring branding of legitimate companies to harvest user information.
- Operation Name
- Lighthouse
- Type of Attack
- SMS Phishing (Smishing)
- Estimated Victims (Global)
- Over 1 million
- Estimated Credit Card Numbers Stolen (US)
- 12.7 million to 115 million
- Legal Actions Filed By Google
- Racketeer Influenced and Corrupt Organizations (RICO) Act, Lanham Act, Computer Fraud and Abuse Act
- Google's Countermeasures
- Lawsuit, AI-powered scam flagging, blocking malicious links, expanding account recovery options, public education