Chinese cybercrime operation that used AI to scam ‘hundreds of thousands of victims’ sued by Google

· Source: AI News & Artificial Intelligence | TechCrunch · Field: Technology & Digital — Artificial Intelligence & Machine Learning, Cybersecurity & Data Privacy · Depth: Intermediate, short

Summary

Google has filed a lawsuit against Outsider Enterprise, an alleged Chinese cybercrime network accused of using AI to conduct massive phishing scams. This operation has financially defrauded "hundreds of thousands of victims," with estimated losses in the "millions," and enabled the theft of 3.87 million credit cards, totaling an estimated \$1.9 billion in losses since July 2023. Outsider Enterprise utilizes a "phishing-for-dummies" software called "Outsider," costing \$88 per week or \$200 per month, which employs AI platforms like Google's Gemini to create over 1 million fraudulent web domains and 9,000 fake websites. These sites impersonate various brands, including Google, telecom providers, and financial institutions. Google, which detected 1.59 million related URLs over five months, is collaborating with AT&T, T-Mobile, Verizon, and the FBI to dismantle the infrastructure, having already intercepted over 10 billion scam messages monthly using its own AI tools.

Key takeaway

For AI Security Engineers evaluating threat landscapes, this case highlights the critical need to anticipate AI's dual use in cybercrime. Your organization should prioritize implementing advanced AI-powered detection systems to counter sophisticated phishing-as-a-service operations that employ tools like Gemini. Actively collaborate with industry peers and law enforcement to share threat intelligence and dismantle criminal infrastructure, as these networks are increasingly global and technically adept, posing significant financial and reputational risks.

Key insights

Cybercrime operations increasingly use AI and "as-a-service" platforms for scalable, low-skill phishing attacks.

Principles

Method

Outsider software provides 290+ templates, AI-generated code guides, and a dashboard for creating and tracking phishing campaigns.

In practice

Topics

Best for: CTO, VP of Engineering/Data, Executive, AI Security Engineer, Security Engineer, Legal Professional

Related on AIssential

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by AI News & Artificial Intelligence | TechCrunch.