Google Sues Outsider Enterprise Over AI-Powered Phishing Network

The scale of the operation is staggering. According to court filings, the group deployed 9,000 fake websites and sent 2.5 million scam text messages to Android users within a single two-week window. The software suite, dubbed Outsider, acts as a 'phishing-for-dummies' toolkit that costs as little as $88 per week. It allows users with minimal technical expertise to generate replica websites in minutes, complete with AI-coded lures designed to harvest passwords, multi-factor authentication codes, and credit card data.

Google reports that since July 2023, the platform enabled the theft of at least 3.8 million credit cards. The organization functions like a illicit corporate structure, featuring distinct teams dedicated to software development, target list curation, infrastructure maintenance, and money laundering. These actors coordinate their activities through open Telegram channels, sharing training materials and strategies to bypass security measures. In response, Google is collaborating with the FBI, AT&T, T-Mobile, and Verizon to block malicious traffic and seize infrastructure, including Shopify storefronts and phishing domains used to test the group’s automated scams.