If you've ever received an unsolicited email falsely alerting you to unpaid tolls or a failed package delivery, it may have come from a Phishing-as-a-Service network, which Google is now trying to dismantle. Google has filed a lawsuit against several unidentified defendants, who make up a company called Lighthouse.
The company claims that Lighthouse offers a 'phishing for dummies' kit, for cybercriminals who would not otherwise be able to execute a large-scale phishing campaign. The group allegedly charges a monthly license fee to provide SMS or e-commerce with hundreds of templates for websites that closely resemble financial institutions or government-affiliated organizations. These convincing websites could trick consumers into entering sensitive details.
See also: 'Maverick' malware targets bank customers in Brazil via WhatsApp
In just 20 days, Google claims that Lighthouse was used to create 200,000 fake websites to lure over a million potential victims. It estimates that somewhere between 12.7 million and 115 million credit cards in the US have been compromised by the scam.
The page allegedly tracks users' keystrokes, so that information can be compromised even if the user has second thoughts before submitting it. While many people are familiar with the type of spam that Lighthouse facilitates, the lawsuit describes what happens after someone clicks on these links.
Google: How does the “Lighthouse” attack work?
A scammer could log into a Lighthouse account, using a login page that displays the Google logo as a sign-in option. They could then use the dashboard to send a message falsely alerting a potential victim that the USPS requires a fee to complete a delivery.
See also: GootLoader: New hiding technique on WordPress websites
In this alleged scheme, the message would link to a fake USPS page that asks the user to enter personal and payment information . The page tracks users' keystrokes , according to the complaint, so that information can be compromised even if the user has second thoughts before submitting.
These details are neatly displayed on the Lighthouse dashboard . The group is alleged to be running similar scams, which mimic toll -related websites like EZ Pass, financial institutions , and retail websites . Some include Google logos on their login pages.
Google is trying to break up the group by filing a lawsuit against the defendants for violating the Racketeer Influenced and Corrupt Organizations (RICO Act) and anti-fraud and trademark infringement. The company claims that Lighthouse threatened its trademark by using its name and logo on fake websites.
See also: Android Trojan 'Fantasy Hub' turns Telegram into a hub for hackers
It still doesn't know who the unidentified defendants who make up Lighthouse are or exactly how many are involved, though it believes they are in China. Google names at least 25 defendants, but says the numbers are "indicative." The goal of the lawsuit, in part, is to declare Lighthouse's scheme illegal so that the group can be removed from other technology providers as well.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
