FBI Disrupts Chinese Phishing Service Outsider Enterprise, Google Files Civil Suit
The FBI has dismantled China-based Outsider Enterprise, a phishing-as-a-service operation using AI. The service, active for three years and costing as little as $88 weekly, generated over a million fraudulent URLs, leading to 3.8 million stolen credit cards and $1.9 billion in losses. Google also filed a civil suit.
Key points
- The FBI dismantled China-based phishing-as-a-service operation Outsider Enterprise, seizing servers and cryptocurrency.
- The service, active for roughly three years, offered templates and AI prompts to create fake websites for as little as $88 per week.
- Outsider Enterprise is linked to over 3.8 million stolen credit card records and an estimated $1.9 billion in losses.
- Google filed a civil lawsuit, alleging the service provided tutorials on using AI, like Gemini, for scam site code generation.
- Thousands of phishing pages were redirected to an FBI announcement site, and a Telegram bot storing stolen data was seized.
Law enforcement agencies, including the FBI and supported by Google and Lumen Technologies, have announced the takedown of a significant phishing-as-a-service (PhaaS) operation based in China, known as Outsider Enterprise.
The FBI reported seizing administration servers, cryptocurrency worth approximately $100,000 USD, and a Telegram bot used to store exfiltrated data. The operation, active for about three years, reportedly generated over 9,000 fake websites and at least a million fraudulent URLs. It is linked to the theft of more than 3.8 million credit card records, resulting in estimated losses of $1.9 billion.
Outsider Enterprise operated on a subscription model, with weekly access costing as little as $88 through a Telegram bot. The service provided users with pre-built templates impersonating various entities, including banks, government agencies, and toll systems. Google's civil lawsuit alleges that the operators offered tutorials guiding subscribers on using AI tools, such as Gemini, to generate the underlying code for these scam sites. Thousands of previously active phishing pages have been redirected to an FBI announcement page.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.