Google has filed a lawsuit against an alleged Chinese cybercrime network called Outsider Enterprise, which uses AI in its campaigns to send scam text messages impersonating Google and other brands. The operation is accused of financially scammed “hundreds of thousands of victims” with losses estimated in the millions.
According to Google’s complaint, the group deployed 9,000 fake websites, one million fraudulent web domains, and 2.5 million texts sent to Android users in a two-week period. This is not an isolated incident; since July 2023, Outsider Enterprise’s phishing platform has enabled cybercriminals to steal at least an estimated 3,870,000 stolen credit cards and a corresponding estimated $1.9B in losses.
The cybercrime operation allegedly uses Google’s own AI platforms, including Gemini, to create fake websites that impersonate various services and companies. The scammers collaborate with one another to send victims malicious text messages or purchase ads to lure people to the fake websites. Once on the site, victims are prompted to input sensitive information, which is transmitted through Outsider’s platform in real time.
Google said it has been collaborating with AT&T, T-Mobile, and Verizon to block the scam text messages and is coordinating with the FBI. The company uses AI-powered tools to fight AI-powered scams, detecting over 10 billion scam messages a month and alerting users of suspicious calls and text messages.
The lawsuit accuses the people behind Outsider Enterprise of impersonating Google and its brands, infringing its copyright, racketeering activities, wire fraud, and false advertising. Google is seeking compensatory and punitive damages, as well as an order to stop the criminals from carrying out their activities.
This case highlights the growing threat of AI-powered cybercrime operations and the need for companies like Google to stay ahead of these threats using advanced technologies.
### The Scale of Outsider Enterprise’s Operation
Google said that over a five-month period, from November 14, 2025 to April 14, 2026, the company detected more than 1.59 million URLs connected to Outsider Enterprise. This includes over a million phishing websites created using the Outsider software, which costs $88 per week or $200 per month.
The cybercriminals have allegedly used Google Drive and Google Cloud infrastructure to host the phishing websites. The company accused the people behind Outsider Enterprise of stealing at least 36,000 payment cards issued by financial institutions in 95 countries.
### The Phishing Software Used by Outsider Enterprise
Google’s complaint describes the phishing software used by Outsider Enterprise as a “phishing-for-dummies” platform that allows operators to create fake websites with the help of AI platforms. The software, called Outsider, offers over 290 pre-built templates that mimic legitimate websites and guides on how to “weaponize AI-generated code.” It also includes a dashboard to track progress of phishing campaigns.
### Conclusion
The lawsuit against Outsider Enterprise highlights the need for companies like Google to take proactive measures to combat AI-powered cybercrime operations. By using advanced technologies, such as AI-powered tools, companies can stay ahead of these threats and protect their users from financial losses.
Source: Original article