Google sues cybercriminal group Smishing Triad

Google has filed a lawsuit against a China-based cybercriminal group described as behind a large-scale smishing operation that uses a phishing-as-a-service kit named Lighthouse to harvest financial data via text messages, according to Security Affairs. The claims include allegations under the Racketeer Influenced and Corrupt Organizations (RICO) Act, the Lanham Act, and the Computer Fraud and Abuse (CFAA) Act, as reported on 12 November 2025.

The operation, largely based in China, has targeted consumers worldwide and spread to countries including the U.K., with templates impersonating UPS, USPS, the UK government and various telecoms. According to Resecurity, the Lighthouse kit distribution was organised via Telegram, and Google puts the total number of credit cards affected in the U.S. alone at between 12.7 million and 115 million, with victims across 120 countries. The report notes the Smishing Triad’s activity was first detailed in August 2023 by Resecurity.