Google says group behind E-ZPass, USPS text scam has been 'shut down' after suit

In a significant development, Google announced on Thursday that it has successfully disrupted a large-scale SMS phishing operation orchestrated by a foreign cybercriminal group, merely 24 hours after initiating legal action against them. Halimah DeLaine Prado, Google's general counsel, described the shutdown of the group's operations as a considerable victory for consumers. "This closure of Lighthouse's activities is a win for everyone," she stated. "We are committed to holding malicious scammers accountable and safeguarding consumers from their tactics." The lawsuit, filed early on Wednesday, aimed at dismantling an organization that cybersecurity experts have labeled the "Smishing Triad." This group utilized a phishing toolkit known as "Lighthouse" to create and distribute deceptive SMS messages. Google provided translations of Telegram messages allegedly shared by the group's leader, which indicated their frustrations over the disruption. One message read, "Our cloud server has been blocked due to malicious complaints. Please be patient, and we will restore it as soon as possible!" Another hinted at an impending reopening date. While Google did not disclose the specific measures taken to shut down the operation, the impact was clear. The cybercriminal group had reportedly victimized over one million individuals across more than 120 countries. The fraudulent texts often contained harmful links leading to counterfeit websites aimed at stealing sensitive financial data, such as Social Security numbers and banking information. The messages were crafted to resemble urgent notifications about delivery updates, unpaid fees, and fraud alerts, thereby exploiting users' trust in recognized brands like E-ZPass and the U.S. Postal Service. DeLaine Prado highlighted that the group had created over 100 templates using Google’s branding to mislead victims into believing they were accessing legitimate sites.