Smishing

Google swiftly disrupted a foreign-based cybercriminal group behind a massive SMS phishing campaign, known as the “Smishing Triad,” after filing a lawsuit. The group used a phishing kit called “Lighthouse” to target over a million people in 120 countries with deceptive SMS messages impersonating legitimate services. These messages led victims to fraudulent websites to steal financial information. Google acted within 24 hours, but details of the shutdown methods were not disclosed. This proactive approach highlights the fight against sophisticated phishing operations.

Google has filed a lawsuit against a Chinese cybercriminal organization, “Smishing Triad,” alleging they orchestrated a massive SMS phishing campaign using the “Lighthouse” phishing-as-a-service kit. This kit facilitated widespread attacks stealing user data by mimicking recognizable brands. Google invokes RICO, Lanham Act, and CFAA, seeking to dismantle the platform and prevent further harm. The lawsuit details a sophisticated operation with specialized subgroups and millions of compromised credit cards, highlighting Google’s commitment to combating online fraud and supporting legislative measures against cybercrime.

A recent CNBC AI News report details a sophisticated “smishing” scheme involving fraudulent online job ads used to lure victims into financial scams. A Shanghai man was tricked into sending RMB 50,000 cash. Law enforcement intercepted the funds and arrested the “driver” facilitating the transfer. These drivers, often recruited via seemingly legitimate job postings, unknowingly facilitate crimes and face serious consequences.