Google says group behind E-ZPass, USPS text scam has been ‘shut down’
The Google corporate logo hangs outside the Google Germany offices on August 31, 2021 in Berlin, Germany.
Sean Gallup | Getty Images News | Getty Images
Google said on Thursday said it has disrupted the foreign cybercriminal group behind a massive SMS text phishing operation within 24 hours of filing its lawsuit.
“This shut down of Lighthouse’s operations is a win for everyone,” said Google general counsel Halimah DeLaine Prado. “We will continue to hold malicious scammers accountable and protect consumers.”
Google filed the suit early Wednesday, seeking to dismantle the organization that some cyber experts have dubbed the “Smishing Triad,” which used a phishing kit named “Lighthouse” to generate and deploy attacks using fake texts.
The company provided translated Telegram messages allegedly posted by the group’s ringleader.
“Our cloud server has been blocked due to malicious complaints. Please be patient and we will restore it as soon as possible!” one message read.
Another message stated that “The reopening date will be announced separately.”
Google did not provide specifics on how the operation was shut down.
The crime group had harmed at least 1 million victims across over 120 countries, Google said in a release.
Victims would receive texts containing malicious links to fraudulent websites designed to steal sensitive financial information, including Social Security numbers and banking credentials.
The messages often appeared as fake delivery updates, unpaid fees notifications, fraud alerts, and other texts designed to appear urgent.
“They were preying on users’ trust in reputable brands such as E-ZPass, the U.S. Postal Service, and even us as Google,” DeLaine Prado previously told CNBC.
The company said that it found over 100 templates generated by Lighthouse using the company’s branding to trick victims into thinking the sites were legitimate.
