Ethical Hacking News
Google has filed a lawsuit against a Chinese cybercrime network accused of using its Gemini AI to facilitate sophisticated phishing operations, including smishing attacks. The lawsuit seeks to dismantle the network's infrastructure and protect users from potential data breaches.
Google has initiated legal action against a Chinese cybercrime network accused of using AI-powered Gemini agent for phishing attacks. The network allegedly uses a phishing-as-a-service (PhaaS) software kit called Outsider to facilitate massive SMS phishing attacks. Outsider offers over 290 pre-built templates, real-time keystroke logging, and performance tracking tools to carry out phishing operations. The operation is reportedly responsible for 55,000 spam texts and 2.5 million messages containing links to Outsider-generated websites. Google aims to dismantle the network's infrastructure through its legal action, partnering with AT&T, T-Mobile, and Verizon to block malicious messages.
In a significant development, Google has initiated legal action against a Chinese cybercrime network, alleging that it leverages the artificial intelligence (AI) capabilities of its Gemini agent to facilitate phishing attacks. The lawsuit, filed in Manhattan federal court, signifies an escalating global effort to combat the rising menace of sophisticated phishing operations.
The targeted entity is accused of utilizing its Gemini AI to generate fraudulent phishing pages and deploy massive SMS phishing ('smishing') attacks, often through text messages impersonating legitimate brands, thereby prompting recipients to click on links leading to fake websites. This nefarious practice aims to steal personal and financial information from unsuspecting victims.
Google's complaint details the operations of a phishing-as-a-service (PhaaS) software kit called Outsider, allegedly controlled by this Chinese cybercrime network. The company claims that Outsider facilitates an intricate web of collaboration among distinct groups, including the Developer Group, Data Broker Group, Spammer Group, Theft Group, and Telegram Group. These groups work together to execute phishing attacks using the phishing kit.
According to Google, Outsider's PhaaS service offers a variety of tools, such as over 290 pre-built templates impersonating legitimate websites, real-time keystroke logging, and a performance dashboard to track campaign effectiveness. Moreover, users can acquire the necessary licenses for $88 per week, which includes access to AI-generated code that could be used to create custom phishing sites.
The alleged scale of this operation is staggering, with Outsider reportedly responsible for 55,000 spam texts flagged by Android users between May 18 and June 1, 2026. Furthermore, 2.5 million messages were sent to Android users containing links to Outsider-generated websites during the same timeframe.
Brett Leatherman, assistant director of the U.S. Federal Bureau of Investigation's (FBI) Cyber Division, has condemned the actions of those behind the Outsider Enterprise, stating that "Criminals increasingly use AI to make fraud like this more convincing and harder to detect."
Google has partnered with AT&T, T-Mobile, and Verizon to block such messages from reaching customers. The company aims to dismantle the network's infrastructure through its legal action.
This lawsuit marks the latest chapter in Google's ongoing efforts to combat phishing attacks worldwide. The company's actions underscore its commitment to protecting users' personal information and financial security.
Related Information:
https://www.ethicalhackingnews.com/articles/Google-Sues-Chinese-Smishing-Network-for-Alleged-Phishing-Misconduct-Utilizing-Gemini-AI-ehn.shtml
https://thehackernews.com/2026/06/google-sues-chinese-smishing-network.html
Published: Fri Jun 12 15:56:14 2026 by llama3.2 3B Q4_K_M
