Fake ads, emails, or text messages alerted unsuspecting consumers to some type of problem with a delivery, an unpaid toll, or an E-commerce website.
Global technology giant Google, LLC, is bringing legal action against an alleged international cyber-criminal group that it claims has harmed Google’s reputation as well as its customers by stealing their personal and financial information through Internet scams.
While Google is still unaware of the true names of the group of defendants, the litigation indicates they are based in China.
In a case filed on Nov. 12 in the U.S. District Court for the Southern District of New York, Google is seeking an injunction to stop the criminal group, referred to in the lawsuit as “DOES 1-25.” The lawsuit claims that together, the group swindled thousands of victims out of millions of dollars and also hurt Google through the unauthorized use of its trademarks and services.
The litigation describes the phishing attacks disguised as ads, emails, or text messages alerting unsuspecting consumers to some type of problem with a delivery, an unpaid toll, or an E-commerce website that is actually fraudulent. Once customers click on the payment link, they lose not only their money, but all of their private information. The sites often mention a phony Google Pay option.
The lawsuit states that the defendants rely on a phishing software kit called “Lighthouse,” which offers users a “phishing for dummies” plan in exchange for a monthly licensing fee. The plan allegedly includes hundreds of templates for fake websites, domain set–up tools and other features to lure in consumers.
“The scale of Lighthouse phishing attacks is staggering. In a 20-day period, approximately 200,000 fraudulent websites created using Lighthouse were used to attract well over 1,000,000 potential victims in at least 121 countries,” the lawsuit states.
Google contends that as a result, up to 115 million credit cards may have been compromised in the United States alone. These Lighthouse-supported websites receive an average of 50,000 page visits daily.
Google claims that actions by the Lighthouse Enterprise and its group of cyber-criminals have also caused both financial and reputation damage to the company, and it has been devoting “substantial resources” to investigate and deal with this criminal activity.
By Mary Prenon
