Google targets AI-powered phishing in landmark New York lawsuit against ‘Outsider Enterprise’

Google just brought the legal equivalent of a sledgehammer to a phishing operation. The company filed a civil lawsuit in the US District Court for the Southern District of New York on June 12, targeting a suspected China-based cybercrime network it calls the “Outsider Enterprise.”

The case is notable for a specific reason: it’s the first lawsuit in the US that explicitly goes after the misuse of Google’s own Gemini AI technology for running phishing scams.

The scale of the operation

The numbers here are staggering. Between November and April, the Outsider Enterprise allegedly generated more than 1.5 million malicious URLs. In just a 14-day stretch in early May, the network reportedly blasted out 2.5 million fraudulent text messages.

The complaint names Does 1-25 as defendants and details how the Outsider kit, the phishing toolkit at the heart of the operation, allegedly guided users in creating convincing replicas of well-known websites. The targets included Google itself, YouTube, and even the US Postal Service.

The barrier to entry for this kind of cybercrime was disturbingly low. Access to similar phishing kits in prior operations cost around $88 per week.

Google’s legal claims span trademark infringement, violations under the Racketeer Influenced and Corrupt Organizations Act (RICO), and misuse of Google Cloud and Drive services. The company is seeking injunctive relief to shut the operation down entirely.

A coordinated crackdown

Google isn’t going it alone. The company is coordinating with the FBI and three of the largest US telecommunications carriers: AT&T, T-Mobile, and Verizon.

The lawsuit also fits into a broader pattern of rising concern at the highest levels of government. White House officials have noted growing alarm about AI’s potential to supercharge scam operations.

What this means for the crypto and tech landscape

Google’s decision to pursue RICO charges is particularly aggressive. RICO was originally designed to dismantle organized crime families. Using it against a cybercrime network signals that Google, and potentially courts, view these operations as sophisticated criminal enterprises rather than opportunistic lone wolves.

The regulatory angle matters too. A successful case here could accelerate congressional appetite for federal anti-scam legislation, something Google itself is advocating for in connection with this lawsuit.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.