Cracking down on the broad enterprise will be tough, Google anticipates, with its complaint only referencing online aliases and naming a range of John Doe plaintiffs. But identities of all actors in the enterprise—including software developers, data brokers, spammers, thieves, and administrators—must be uncovered to stop the criminal gang from continuing to provide so-called phishing-as-a-service.
“Who is fishing? Looking for a partner.”
The Lighthouse enterprise today mainly coordinates attacks on several Telegram channels, Google alleged, since the tech giant suspended a YouTube channel associated with the criminal activity.
On Telegram, members of the criminal network can “purchase the software, learn how to create various phishing attacks, and, upon purchase, meet the other members of the Enterprise,” Google claimed.
One Telegram channel has over 2,500 members, Google’s filing said. On that channel, members can connect with others who have certain specialties, with users making requests like “Who can send a few US live baits?” or “Who is fishing? Looking for a partner.” Others seek help selling stolen credentials, like one user who posted, “selling pure handmade wealthy accounts with Zel[le] activation, telegraphic transfer accounts, Apple CASH ID, those who understand, come.”
Google monitors Telegram and has spent “hundreds of hours investigating and remediating” Lighthouse scams, the complaint said, and the tech giant now expects that a lawsuit could finally stop the well-known schemes from spreading. Otherwise, Google and countless others will continue suffering “irreparable harm,” the complaint said.
Damages are not specified in the complaint, which accused the Lighthouse enterprise of committing wire fraud and violating the Racketeer Influenced and Corrupt Organizations Act, the Lanham Act, and the Computer Fraud and Abuse Act, among other allegations.
If Google wins, the phishing scams may finally slow, ending the days of Americans squinting at their phones to figure out if they ordered a package or forgot to pay a toll.
“Google’s historic lawsuit marks the first time a company has taken action to curb these scams and dismantle this criminal enterprise,” Google said, vowing to “disrupt the criminal enterprise behind this scheme and stop its spread.”
