Lighthouse — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
24
occurrences
First Seen
November 12, 2025
Last Seen
June 13, 2026

Lighthouse is a threat campaign tracked across 15 threat clusters and 24 intelligence report mentions on ThreatCluster. First observed November 12, 2025; most recent activity June 13, 2026.

Overview

Lighthouse is a phishing-as-a-service (PaaS) platform used to orchestrate large-scale text-based (smishing) phishing campaigns. Operators linked to China provide turnkey infrastructure for scammers, including messaging workflows and targeting, and Google has moved to dismantle the operation via civil litigation; the case highlights the commoditization of social-engineering fraud and the impact of enforcement on SMS-based fraud ecosystems.

Related Threat Clusters

  • Google Sues Chinese Cybercrime Network for AI-Powered Phishing Operations

    Google has filed a lawsuit against the 'Outsider Enterprise', a China-based cybercrime network, for allegedly using AI tools, including its Gemini platform, to conduct large-scale phishing operations. The operation has…

    57 articles · Updated June 12, 2026
  • $11.58M Exploit of Verus-Ethereum Bridge Exposes Cross-Chain Vulnerabilities

    On May 18, 2026, the Verus Ethereum Bridge was exploited, resulting in the theft of approximately $11.58 million in assets, including ETH, tBTC, and USDC. The attack was identified by Blockaid, which reported that the…

    17 articles · Updated May 18, 2026
  • Majority of Ransomware Attacks Occur During Holidays and Weekends

    A study by Semperis reveals that 52% of ransomware attacks target organizations during holidays and weekends, exploiting reduced cybersecurity staffing. The report surveyed 1,500 IT and security professionals across ten…

    23 articles · Updated November 24, 2025
  • Operation Atlantic Launched to Combat Crypto Approval-Phishing Scams

    On March 16, 2026, law enforcement agencies from the U.S., U.K., and Canada launched Operation Atlantic, targeting approval-phishing scams that have defrauded cryptocurrency users. The operation involves the U.S. Secret…

    27 articles · Updated March 16, 2026
  • DoS Vulnerabilities Found in Socomec DIRIS M-70 IIoT Power Meter

    Researchers have identified Denial of Service (DoS) vulnerabilities in the Socomec DIRIS M-70 IIoT power meter through thread emulation and fuzzing techniques. The vulnerabilities affect devices facilitating data…

    4 articles · Updated February 19, 2026
  • Google Sues Chinese Cybercriminals Behind $1 Billion Phishing Scheme

    Google has initiated legal action against a group of Chinese hackers known as the Smishing Triad, responsible for operating the Lighthouse phishing platform. This platform utilized over 194,000 malicious domains to…

    2 articles · Updated November 12, 2025
  • Cybercrime Crackdown Targets Malware and AI Threats

    Law enforcement and cybersecurity firms have launched intensified operations against cybercrime, focusing on sophisticated malware networks and supply chain attacks. Collaborators including CrowdStrike, Europol, and the…

    15 articles · Updated November 18, 2025
  • Operation Endgame 3.0 Disrupts Major Malware Networks

    Europol and law enforcement agencies from 11 countries executed Operation Endgame 3.0 from November 10 to 13, 2025, dismantling the infrastructure of three major malware operations: Rhadamanthys, VenomRAT, and Elysium.…

    20 articles · Updated November 24, 2025
  • Boston Police Warn of Holiday Charity and Phishing Scams

    The Boston Police Department has issued a warning about an increase in charity and phishing scams as the holiday season approaches. Scammers are expected to send messages disguised as coming from trusted companies like…

    27 articles · Updated November 15, 2025
  • Black Friday 2025 Sees Surge in Online Shopping Scams

    During Black Friday 2025, shoppers in Europe and the US are facing a significant increase in online scams, with cybercriminals impersonating major brands to exploit consumers. Action Fraud reports that £11.8 million was…

    43 articles · Updated November 20, 2025

Recent Intelligence Reports

  • Google sues Chinese AI phishing ring as FBI seizes domains and $100000 in Operation Ghost Hook — Cryptopolitan · June 13, 2026
  • Proof Of Stake Vs Proof Of Work A Comprehensive Comparison — coinpaper.com · May 18, 2026
  • U.S., UK and Canada launch operation targeting crypto phishing schemes — Tradersunion · March 16, 2026
  • US Secret Service, UK and Canada launch Operation Atlantic targeting crypto approval ... — Theblock.Co · March 16, 2026
  • “Good enough” emulation: Fuzzing a single thread to uncover vulnerabilities — Blog.Talosintelligence · February 18, 2026
  • Clouds rush to deliver OpenClaw-as-a-service offerings — Theregister · February 4, 2026
  • Google RICO Suit Against Phishing Scammers Using Lighthouse Has Nov 25 Hearing in SDNY — Innercitypress · November 22, 2025
  • Phishing Scam — Theportugalnews · November 22, 2025

CVSS v3.1 Breakdown