Google just fired a shot across the bow of the cybercrime world, and the blast radius is massive.
The tech giant filed a lawsuit last Friday against a sprawling alleged Chinese operation called Outsider Enterprise, a network that has been accused of running what Google calls a “phishing-for-dummies” service. This isn’t some sophisticated nation-state hacking crew working in the shadows. This is a turnkey criminal marketplace that lets anyone with $88 a week launch professional-grade scams, no technical skills required.
The scale of the operation, as detailed in Google’s complaint and reported by TechCrunch, is almost hard to wrap your head around. We’re talking about 9,000 fake websites, over a million fraudulent domains, and 2.5 million scam text messages sent to Android users in just two weeks. The group financially scammed hundreds of thousands of victims with losses estimated in the millions.
The FBI estimates that since July 2023, the phishing platform enabled by Outsider Enterprise led to at least 3.87 million stolen credit cards and roughly $1.9 billion in losses. That’s not a typo.
The AI-Powered Scam Factory
What makes this particular operation so concerning is how it weaponizes artificial intelligence while simultaneously exploiting Google’s own tools. The Outsider software allegedly offers more than 290 pre-built templates that mimic legitimate websites. Users can generate replicas of real sites in minutes, complete with AI-generated code and guides on how to automate the whole process.
According to Google’s complaint, the cybercriminals even used Google Drive and Google Cloud infrastructure to host their phishing websites. That’s a bitter irony: the same infrastructure Google built for productivity and collaboration became the bedrock for fraud. The platform integrates with Telegram channels where criminals coordinate, train each other, and share strategies. Google described this as “open and largely uncoded discussions” happening in plain sight.
A New Kind of Cybercriminal Marketplace
This case represents something troubling in the cybercrime landscape: the complete commodification of fraud. The people behind Outsider Enterprise didn’t just run phishing campaigns themselves. They built and sold the tools that let anyone become a phisher.
For $88 per week or $200 per month, customers got access to a dashboard to track their campaigns, templates for impersonating telecom providers, financial institutions, government agencies, and retailers, and the ability to steal passwords and multi-factor authentication codes in real time. The platform allegedly handled the data transmission, meaning victims’ information flowed directly to the criminals through Outsider’s infrastructure.
Google said the operation involves several distinct groups: developers maintaining the phishing software, data brokers supplying target lists from public records and breaches, a “spammer group” handling bulk text messages through smartphone banks and SIM cards, and others monetizing the stolen credentials.
Google’s Response and What Comes Next
Google says it uses its own AI-powered tools to fight these scams, intercepting more than 10 billion fraudulent messages monthly. The company has been working with AT&T, T-Mobile, and Verizon to block the text messages, and coordinating with the FBI. The bureau, along with Lumen’s Black Lotus Labs, has already seized several domains and Shopify storefronts used by the operation.
The lawsuit seeks compensatory and punitive damages, plus an order to stop the criminals from continuing their activities. But here’s the uncomfortable truth: for every operation Google takes down, another will likely pop up in its place. The demand for these tools exists, and the economics make it a relentless cat-and-mouse game.
What makes this particular case interesting is Google’s willingness to go on the offensive rather than just playing defense. By suing the infrastructure providers rather than just the individual scammers, Google is attempting to cut off the head of the snake. It’s a bold strategy, but whether it actually deters others remains to be seen.
