India Taps Google on Firebase Scam Accounts
India has ordered Google to remove hundreds of accounts from its Firebase development platform after investigators found scammers using the service to impersonate banks, distribute malware and collect information stolen from Android phones.
The Indian Cyber Crime Coordination Centre (I4C) issued three notices in August seeking the removal of at least 57 Firebase-hosted websites and databases. Seven of these links were phishing pages that mimicked State Bank of India, ICICI Bank and Axis Bank.
The scammers used Firebase's tools to host websites, authenticate users, send notifications, and store application data. This allowed them to connect their phishing page, malicious app, and stolen-data repository within one development environment.
Google said it has 'strict policies prohibiting the use of our services for phishing, malware, or financial fraud' and works with I4C and other law-enforcement agencies to assess takedown requests.