China's Cyber Chess: Google's Lawsuit, Scam Squads, and Infrastructure Intrigue

This is your Red Alert: China's Daily Cyber Moves podcast. Ting here—witty, caffeinated, and ready to break down China’s cyber chess game this week. If you’re imagining the usual script of boring breaches and “please patch now” advisories, buckle up, because the last forty-eight hours have been anything but routine. Yesterday hit with a bang: Google slapped a massive federal lawsuit on Lighthouse, that infamous China-based “phishing-as-a-service” empire. The Lighthouse gang is not your garden-variety cyber crooks. They gave the middle finger to MFA, SMS gateways, and even spoofed legit brands like E-ZPass and USPS, fleecing over a million Americans out of personal data and, for at least 15 million of us, credit card info. Some estimates put the impact at up to 100 million cards compromised in this wave. This stuff isn’t just financial crime—it’s digital economic warfare. Remember, the Feds think groups like Salt Typhoon could use this meta data to build social networks and then go for high-level credential theft. Quick timeline: Google’s legal blast lands at 10:00 AM EST yesterday, emergency CISA and FBI advisories go out by lunch, and every enterprise CISO I know is suddenly sweating their SMS filtering rulebooks. But if you thought that was the cherry on the cake—no, no. At almost the same hour, U.S. Attorney Jeanine Pirro stood at the podium and announced the first “Scam Center Strike Force.” This is the task force meant to take down transnational cybercrime rings, many with roots in China and Southeast Asia. Pirro’s words were aimed straight at the syndicates that have raked in at least $10 billion from Americans in the past year with those pig butchering and crypto investment scams. Picture online romance mixed with financial fraud, and you’re getting warm. Compromised victims? Elderly Americans. Compromised platforms? Everything—from Telegram to fake brokerage sites you’d think are legit. Microsoft and Meta are now collaborating with DOJ on infrastructure protection and public education blitzes. It’s rare to see tech giants plus government come out swinging together, but hey, everyone's wallet is on the line. Meanwhile, beneath all the headline grabbing, China’s state groups like Volt Typhoon and Salt Typhoon are running a slow burn: burrowing into the controls for U.S. water, power grids, and telecoms, just staying quiet, collecting credentials, and ready to flip switches if escalation hits. Microsoft, CISA, NSA, and the UK NCSC are echoing the same drumbeat: these groups “live off the land,” use native tools, and their malware is almost invisible. Last year they breached AT&T, Verizon, and Lumen—meaning there’s a real risk of telecom and power outage if tensions rise. So what now? Listener, it’s time to double down on defense: harden your identity systems with phishing-resistant MFA, segment your networks—especially between IT and operational tech—and patch those firewalls, especially if you’re running any flavor of Cisco or Citrix This content was created in partnership and with the help of Artificial Intelligence AI.