Complete AI Training
Sign inGet my AI kit

Your job's AI kit

Get your AI kit

Tell us who you are and what you do. We show you your kit right away and email you the link: skills, prompts, AI agents, MCP servers and courses for your job.

500+ jobs ready, and we make a kit for any other job. No payment needed to look.

Share

AI news ·

Google sues suspected Chinese cybercrime network over AI text message phishing campaign

Google sued Chinese syndicate Outsider Enterprise for sending 2.5 million fraudulent AI text messages to US Android users. The group built 9,000 fake websites to steal data.

2 min read
Legal

Google filed a lawsuit on Friday against a suspected Chinese cybercrime syndicate, Outsider Enterprise, for orchestrating a massive AI-driven phishing campaign. The operation sent over 2.5 million fraudulent text messages to US Android users in May, highlighting the growing legal and security risks as criminal networks use generative AI to scale fraud.

The mechanics of the AI phishing campaign

The complaint alleges that the syndicate targeted US consumers by sending deceptive messages impersonating trusted brands and online services. These texts contained urgent warnings about compromised accounts or package delivery issues, prompting recipients to click malicious links. Once victims followed the links, they were redirected to fraudulent websites designed to harvest sensitive personal information. According to Bloomberg, the network generated approximately 9,000 fake websites and more than one million fraudulent URLs during the two-week period.

Misuse of generative AI tools

Investigators claim the group coordinated its activities through Telegram, sharing techniques and distributing links to these malicious domains. A notable detail in the lawsuit is the allegation that scammers encouraged one another to use Google's own Gemini artificial intelligence chatbot. They reportedly used the tool to develop customized code for building the malicious websites, demonstrating how generative models can be adapted for criminal infrastructure. Legal professionals monitoring AI for Legal will recognize this as a clear example of how dual-use technology complicates liability and enforcement.

Google collaborated with major telecommunications providers, including AT&T, T-Mobile, and Verizon, to identify and block the fraudulent messages before they reached consumers. This legal action reflects a broader strategy by technology companies to use the courts to dismantle cybercriminal infrastructure. Nasrin Rezai, chief information security officer at Verizon, said, "We look forward to standing with Google, the telecom industry, and federal law enforcement in this coordinated effort to dismantle malicious domains and disrupt global cybercrime operations."

This lawsuit signals a shift in how technology companies address the misuse of their own platforms. When generative AI tools are explicitly cited in complaints as instruments for building criminal infrastructure, it raises new questions about platform liability and the duty of care. Counsel advising tech firms or regulatory bodies must prepare for increased scrutiny over how AI models are monitored and whether terms of service adequately deter malicious repurposing.

Share