Google SDNY civil lawsuit against Lighthouse
Regulatory/Legal Action
Summary
Hide ▲
Show ▼
Google filed a civil lawsuit in SDNY against the operators of Lighthouse, seeking to dismantle a PhaaS operation tied to phishing abuse across 120 countries and over 1 million users. The case matters because the alleged infrastructure was used to steal financial information through large-scale SMS phishing and brand impersonation. Google said the operation abused trusted names like E-ZPass and USPS and used 107 Google-branded templates to make fake sign-in pages look legitimate. The lawsuit aims to disrupt the underlying fraud infrastructure and reduce further brand abuse and credential theft.
Related Happenings
Ghost Stadium FIFA World Cup fraud campaign
Campaign
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
About this happening:
A **Ghost Stadium** fraud campaign has registered **4,300+ FIFA lookalike domains** and is using **paid Facebook ads** to funnel **2026 FIFA World Cup** fans into phishing and tic...
Ghost Stadium FIFA World Cup fraud campaign
CampaignAbout this happening: A **Ghost Stadium** fraud campaign has registered **4,300+ FIFA lookalike domains** and is using **paid Facebook ads** to funnel **2026 FIFA World Cup** fans into phishing and tic...
Triad Nexus expands fraud ecosystem and shifts into emerging markets after 2025 US sanctions
Threat Actor Meta
First: 14.04.2026 15:00
Last: 14.04.2026 15:00
Sources 1
About this happening:
**Triad Nexus** expanded its fraud ecosystem after **US Treasury sanctions in 2025**, increasing operational scale and shifting into **emerging markets**. The network’s use of **U...
Triad Nexus expands fraud ecosystem and shifts into emerging markets after 2025 US sanctions
Threat Actor MetaAbout this happening: **Triad Nexus** expanded its fraud ecosystem after **US Treasury sanctions in 2025**, increasing operational scale and shifting into **emerging markets**. The network’s use of **U...
Bitter Middle East spear-phishing campaign targeting civil society figures
Campaign
First: 09.04.2026 13:45
Last: 09.04.2026 13:45
Sources 1
About this happening:
A **spear-phishing campaign** targeted **civil society figures in Middle Eastern countries**, including **three journalists in Egypt and Lebanon**, creating account-compromise ris...
Bitter Middle East spear-phishing campaign targeting civil society figures
CampaignAbout this happening: A **spear-phishing campaign** targeted **civil society figures in Middle Eastern countries**, including **three journalists in Egypt and Lebanon**, creating account-compromise ris...
TikTok for Business phishing campaign using Turnstile and reverse proxy
Campaign
First: 26.03.2026 16:09
Last: 26.03.2026 16:09
Sources 1
About this happening:
A **phishing campaign** is targeting **TikTok for Business accounts** and uses **Cloudflare Turnstile** to block automated analysis before exposing a **reverse-proxy** credential-...
TikTok for Business phishing campaign using Turnstile and reverse proxy
CampaignAbout this happening: A **phishing campaign** is targeting **TikTok for Business accounts** and uses **Cloudflare Turnstile** to block automated analysis before exposing a **reverse-proxy** credential-...
1Campaign-DuppyMeister ecosystem shift changes threat-actor operations
Threat Actor Meta
First: 24.02.2026 23:45
Last: 24.02.2026 23:45
Sources 1
About this happening:
**1Campaign** is a long-running **cloaking service** that helps operators keep **malicious Google Ads** online while evading **researcher scrutiny** and automated inspection. The...
1Campaign-DuppyMeister ecosystem shift changes threat-actor operations
Threat Actor MetaAbout this happening: **1Campaign** is a long-running **cloaking service** that helps operators keep **malicious Google Ads** online while evading **researcher scrutiny** and automated inspection. The...
Timeline
-
12.11.2025 17:48 3 articles · 6mo ago
Google files SDNY lawsuit over Lighthouse phishing platform
Legal Policy Action UpdateGoogle filed a civil lawsuit in the U.S. District Court for the Southern District of New York against China-based hackers behind the Lighthouse Phishing-as-a-Service platform, alleging large-scale SMS phishing that used fake toll-fee and package-delivery lures to steal financial information and fraudulent sign-in pages with Google branding. The complaint says Lighthouse ensnared over 1 million users across 120 countries, cites at least 107 website templates featuring Google's branding, and seeks to dismantle the underlying infrastructure under the RICO Act, the Lanham Act, and the Computer Fraud and Abuse Act.
Show sources
- Google Sues China-Based Hackers Behind $1 Billion Lighthouse Phishing Platform — thehackernews.com — 12.11.2025 17:48
- Google Files Lawsuit to Dismantle 'Lighthouse' Smishing Kit — www.infosecurity-magazine.com — 14.11.2025 11:45
- Chinese Threat Actors Ditch Static Phishing Pages for Live Credential Interception — www.infosecurity-magazine.com — 26.05.2026 17:45