Description
Google has filed a complaint in court that details the scam:
> In a complaint filed Wednesday, the tech giant accused "a cybercriminal group in China" of selling "phishing for dummies" kits. The kits help unsavvy fraudsters easily “execute a large-scale phishing campaign,” tricking hordes of unsuspecting people into “disclosing sensitive information like passwords, credit card numbers, or banking information, often by impersonating well-known brands, government agencies, or even people the victim knows.”
>
> These branded "Lighthouse" kits offer two versions of software, depending on whether bad actors want to launch SMS and e-commerce scams. "Members may subscribe to weekly, monthly, seasonal, annual, or permanent licenses," Google alleged. Kits include "hundreds of templates for fake websites, domain set-up tools for those fake websites, and other features designed to dupe victims into believing they are entering sensitive information on a legitimate website."
>
> Google’s filing said the scams often begin with a text claiming that a toll fee is overdue or a small fee must be paid to redeliver a package. Other times they appear as ads--sometimes even Google ads, until Google detected and suspended accounts--luring victims by mimicking popular brands. Anyone who clicks will be redirected to a website to input sensitive information; the sites often claim to accept payments from trusted wallets like Google Pay.
> In a complaint filed Wednesday, the tech giant accused "a cybercriminal group in China" of selling "phishing for dummies" kits. The kits help unsavvy fraudsters easily “execute a large-scale phishing campaign,” tricking hordes of unsuspecting people into “disclosing sensitive information like passwords, credit card numbers, or banking information, often by impersonating well-known brands, government agencies, or even people the victim knows.”
>
> These branded "Lighthouse" kits offer two versions of software, depending on whether bad actors want to launch SMS and e-commerce scams. "Members may subscribe to weekly, monthly, seasonal, annual, or permanent licenses," Google alleged. Kits include "hundreds of templates for fake websites, domain set-up tools for those fake websites, and other features designed to dupe victims into believing they are entering sensitive information on a legitimate website."
>
> Google’s filing said the scams often begin with a text claiming that a toll fee is overdue or a small fee must be paid to redeliver a package. Other times they appear as ads--sometimes even Google ads, until Google detected and suspended accounts--luring victims by mimicking popular brands. Anyone who clicks will be redirected to a website to input sensitive information; the sites often claim to accept payments from trusted wallets like Google Pay.
Basic Information
ID
SCHNEIER:AA8518A07868573F33A94E4AA41FA994
Published
Nov 20, 2025 at 12:07
Modified
Nov 18, 2025 at 17:10