Google estimates that cracking down on the broader enterprise will be difficult, with its complaint referencing only online aliases and naming a series of John Doe plaintiffs. But to prevent criminal gangs from continuing to provide so-called phishing-as-a-service, the identities of all actors in the enterprise, including software developers, data brokers, spammers, thieves and administrators, must be exposed.
“Who’s fishing? Looking for a partner.”
Google alleged that the Lighthouse enterprise coordinated attacks primarily on multiple Telegram channels today, as the tech giant suspended a YouTube channel linked to criminal activity.
Google claimed that on Telegram, members of the criminal network “can purchase software, learn how to conduct various phishing attacks, and meet other members of the enterprise after purchase.”
Google’s filing said one Telegram channel has more than 2,500 members. On that channel, members can connect with others who have certain specifics, users can make requests such as “Who can send some American live bait?” or “Who’s fishing? Looking for a partner.” Others want help selling stolen credentials, like one user posted, “Selling pure handmade rich accounts with Zelle[le] Activation, telegraphic transfer accounts, Apple CASH ID, those who understand, come.”
The complaint says Google monitors Telegram and has “spent hundreds of hours” investigating and remediating Lighthouse scams, and the tech giant now hopes a lawsuit can finally stop the well-known schemes from spreading. Otherwise, Google and countless others will suffer “irreparable harm,” the complaint says.
The losses are not specified in the complaint, which accuses Lighthouse Enterprises of committing wire fraud and violating the Racketeer Influenced and Corrupt Organizations Act, the Lanham Act, and the Computer Fraud and Abuse Act, among other charges.
If Google wins, phishing scams could finally slow down, ending the days of Americans checking their phones to find out if they ordered a package or forgot to pay a toll.
“Google’s landmark lawsuit represents the first time that a company has taken action to curb these scams and end this criminal enterprise,” Google said, “to disrupt the criminal enterprise behind this scheme and stop its spread.”