Sue The Hackers – Google Sues Over Phishing as a Service

According to Security Boulevard, Google filed a lawsuit on 12 November 2025 in the Southern District of New York against the operators of a massive Phishing-as-a-Service platform called Lighthouse. The complaint portrays Lighthouse as selling ready-made phishing kits that impersonated brands such as E-ZPass, USPS, and Google itself, complete with sign-in screens bearing Google’s trademarks. These kits were rented out to criminals worldwide and helped steal credentials and credit card data from millions of users.

The filing frames the action as both a hacking indictment and a racketeering case, with Google seeking injunctive relief and other remedies alongside the civil suit. Google’s move reflects an approach that aims to curb phishing through civil litigation in addition to law enforcement efforts.