Overview
- Google alleges the Lighthouse platform sold subscription smishing kits with hundreds of spoof templates for brands such as USPS, E‑ZPass and banks, including more than 100 sign‑in pages misusing Google’s logos.
- In one 20‑day span, Lighthouse was allegedly used to generate about 200,000 fraudulent sites that targeted over 1 million people across roughly 120 countries.
- The complaint cites U.S. exposure of between 12.7 million and 115 million compromised payment cards, with operations organized on public Telegram channels of about 2,500 members.
- Google describes evasion features including real‑time keystroke capture and tricks to harvest multi‑factor authentication codes, plus region‑specific templates and occasional use of online ads to lure victims.
- The suit brings RICO, Lanham Act and CFAA claims and seeks a temporary restraining order, domain and IP takedowns, and discovery to identify defendants believed to be in China, while backing the GUARD, Foreign Robocall Elimination and SCAM Acts.