Google Against Outsider Enterprise: AI at the Service of Phishing

Google recently filed a lawsuit against Outsider Enterprise, an alleged Chinese cybercrime network accused of leveraging artificial intelligence to conduct extensive SMS phishing campaigns. The complaint, filed on June 12, describes Outsider as a “phishing-as-a-service” (PaaS) platform sold via Telegram, enabling criminals to create fraudulent websites and run smishing (SMS phishing) campaigns at low costs, amounting to $88 per week or $200 per month. This legal action underscores the growing concern over the malicious use of Large Language Models (LLMs) and other AI tools in the cyber threat landscape.

The operation allegedly targeted hundreds of thousands of Android users in the United States, sending approximately 2.5 million fraudulent messages in just two weeks. The messages contained deceptive links designed to steal personal and financial information from victims' mobile phones. Outsider's ability to rapidly generate persuasive content at scale, often impersonating well-known brands or financial institutions, represents a significant challenge for digital security, highlighting how AI can amplify the effectiveness of traditional attacks.