Google Strikes Back: Massive Chinese Cyberattack Dismantled

Google Takes on Large-Scale Chinese Cyberattack

Google has recently taken legal action to dismantle a vast cybercrime operation attributed to a Chinese network called Outsider Enterprise. This organization is accused of using artificial intelligence to orchestrate large-scale phishing campaigns aimed at deceiving users by impersonating Google and other major brands.

The tech giant announced last Friday that it is suing this network, which it claims has sent fraudulent text messages with the intent of stealing sensitive information such as passwords and credit card numbers.

Alarming Figures

According to information provided by Google, Outsider Enterprise has reportedly managed to financially scam hundreds of thousands of victims, resulting in estimated losses of several million dollars. The group is said to have set up 9,000 fraudulent websites and registered one million fraudulent web domains. In just two weeks, they allegedly sent 2.5 million text messages to Android users.

In May, 55,000 spam texts were reported by Android users, which equates to more than two spam complaints per minute.

Google's Response

To counter these attacks, Google is using AI-powered tools capable of detecting scams and alerting users about suspicious calls and text messages. With these technologies, the company manages to intercept over 10 billion fraudulent messages per month.

Google has also collaborated with telecom operators such as AT&T, T-Mobile, and Verizon to block fraudulent text messages. Additionally, the company has coordinated its efforts with the FBI to dismantle this operation.

The Role of the FBI and Partners

A spokesperson for the FBI confirmed to TechCrunch that the bureau, in collaboration with Google and Lumen's Black Lotus Labs, has seized several domains used by cybercriminals, as well as storefronts and Shopify accounts used to test the phishing service.

Since July 2023, Outsider Enterprise's phishing platform has reportedly allowed the theft of at least 3,870,000 credit cards, resulting in estimated losses of $1.9 billion.

The Underbelly of Outsider Enterprise

In its lawsuit, Google detailed the evidence gathered against Outsider Enterprise, describing this group as international cybercriminals whose identities remain unknown. This network is accused of developing and maintaining online software that enables anyone, regardless of technical skills, to create fraudulent websites to steal from victims.

The software, dubbed Outsider, is offered at $88 per week or $200 per month. It allows users to create deceptive websites with the help of AI platforms, including Google's own tool, Gemini. These sites mimic various services, ranging from telecommunications to financial institutions.

A Well-Oiled Organization

To attract victims, cybercriminals send malicious text messages or purchase ads. The goal is to steal sensitive information, such as passwords and verification codes, by exploiting the data entered by victims on the fake sites.

Google emphasizes that the Outsider software is particularly appealing to those with limited technical skills due to its ease of use and communication channels like Telegram, where cybercriminals can collaborate and exchange strategies.

The Outsider platform offers over 290 pre-designed templates that imitate legitimate websites, allowing for replicas to be created in minutes. It also provides guides for transforming AI-generated code into attack tools, as well as a dashboard to track phishing campaigns.

The Scale of the Operation

Google revealed that the Outsider software has been used to create over one million phishing sites, scamming victims out of millions of dollars. Between November 14, 2025, and April 14, 2026, more than 1.59 million URLs linked to Outsider Enterprise were detected.

The Outsider Enterprise operation consists of several groups: those who develop the phishing software, those who provide target lists, a spam group that sends fraudulent texts, and those who monetize the stolen information.

The cybercriminals have managed to steal at least 36,000 payment cards issued by financial institutions in 95 countries.

Google's Accusations

Google accuses the individuals behind Outsider Enterprise of impersonating its brands, violating its copyrights, and engaging in fraud and false advertising. Through this lawsuit, Google seeks to obtain compensatory and punitive damages, as well as an injunction to prevent these criminals from continuing their activities.