FBI Dismantles AI-Driven Phishing Service Linked to $1.9 Billion in Losses

Federal authorities have dismantled Outsider Enterprise, a China-based phishing-as-a-service operation that leveraged artificial intelligence to automate cyberattacks. The FBI, Google, and Lumen Technologies jointly took down the infrastructure after identifying its role in generating convincing scam sites at scale. This action targets a criminal model where operators used generative tools to bypass traditional security defenses.

Federal authorities seize infrastructure used by Outsider Enterprise to automate scam site generation

The service operated as a subscription platform accessible through Telegram, offering pre-built templates for impersonating banks, government agencies, and toll systems like E-ZPass. Buyers paid $88 per week or $200 per month to access these assets, which included real-time data capture capabilities for SMS codes and two-factor authentication approvals.

Operators utilized Google's Gemini model to generate HTML code for phishing pages by framing malicious requests as innocuous coding tasks. This method allowed the group to produce thousands of unique domains that redirected victims to fraudulent interfaces. The FBI now redirects these seized domains to a splash page detailing the enforcement action.

The operation is linked to approximately $1.9 billion in losses and the theft of 3.87 million credit cards since July 2023 according to FBI estimates. Google reported sending 2.5 million scam texts to Android users over a two-week period in May, though its victim count remains narrower than federal figures. Authorities seized servers and payment wallets containing roughly $100,000 in USDT during the takedown.