
Google Sues Cybercriminals Behind “Lighthouse” Phishing Scam: $115M Credit Card Theft Alleged
the staff of the Ridgewood blog
Ridgewood NJ, in a major move to protect its users and brand integrity, Google has filed a landmark lawsuit against a vast network of cybercriminals. The company alleges this group is responsible for massive phishing campaigns that have victimized over a million people globally by impersonating trusted entities—including Google itself, E-ZPass, and the U.S. Postal Service (USPS).
The lawsuit, filed in the Southern District of New York, targets over 200 scammers who allegedly utilize sophisticated software, dubbed “Lighthouse,” to execute their fraud. This legal action is a clear signal that tech giants are intensifying their defense against the transnational criminal organizations that rely on phishing for profit.
The Anatomy of the Scam: Simple, but Devastating
According to Google’s General Counsel, Hannah DeLaine Prado, the scam’s execution is alarmingly simple and highly effective:
“The scam is simple: criminals send a text message, prompting recipients to click a link and share information such as email credentials, banking information and more. They exploit the reputations of Google and other brands by illegally displaying our trademarks and services on fraudulent websites.”
By illegally displaying trademarks, including the Google logo, the criminals trick users into believing they are signing in or making legitimate payments. The sheer scale of the operation is staggering:
- Victim Count: Harmed more than 1 million victims across over 120 countries.
- Credit Card Theft: Stolen between 12.7 million and 115 million credit cards in the U.S. alone.
- Fraudulent Sites: Over 100 sites used Google’s logo, with thousands of fraudulent websites tracked between July 2023 and October 2024.
Google is primarily concerned about the damage to user trust—making it harder for users to know which websites are truly safe.
The Legal Strategy: Dismantling Criminal Infrastructure
While the identities of all the scammers remain elusive (Google suspects many are based in China), the lawsuit has a strategic objective: dismantling the criminal infrastructure.
Google is seeking a declaratory judgment that the phishing activity, backed by the Lighthouse software, is illegal.
As DeLaine Prado explained, this judgment provides:
“A legal basis on which to go to other platforms and services and ask for their assistance in taking down different components of this particular illegal infrastructure… Even if we can’t get to the individuals, the idea is to deter the overall infrastructure in some cases.”
Beyond the Courtroom: Google’s Legislative Push
In addition to its legal efforts, Google is actively supporting three bipartisan pieces of legislation aimed at strengthening defenses against online scams and financial fraud:
- Guarding Unprotected Aging Retirees from Deception Act (GUARD Act): This bill would empower local police to use blockchain technology for investigating financial fraud that specifically targets seniors.
- Foreign Robocall Elimination Act: Aims to increase efforts to block foreign-originated robocalls.
- Scam Compound Accountability and Mobilization Act (SCAM Act): Requires the U.S. Secretary of State and other relevant agencies to address international scam compounds and go after transnational criminal organizations responsible for defrauding people in the United States.
Take the Wall Street Walking Tour https://www.facebook.com/unofficialwallstreet
#WallStreetTours,#FinancialDistrictExploration, #ExploreWallStreet, #FinancialHistoryTour, #StockMarketExperience, #FinancialDistrictDiscovery, #NYCFinanceTour,#WallStreetAdventure



I got a fake UPS text today
These scumbags never quit