FBI Dismantles Chinese AI-Powered Phishing Service, Preventing $1.9B in Losses

Photo: Tom's Hardware
Quick answer
The FBI dismantled the Chinese phishing platform Outsider, which leveraged AI (Gemini) to generate fraudulent websites.
The FBI, Google, and Lumen Technologies have dismantled the Chinese phishing platform Outsider, which provided cybercriminals with AI-powered tools to create fraudulent websites. The service was sold via a Telegram bot for as little as $88 per week and enabled the generation of fake bank, government, and payment system pages in minutes.
No technical expertise was required: users selected from 290 pre-built templates, while AI (Gemini model) generated page code disguised as harmless 'gift' sites. This allowed attackers to bypass AI safety filters and rapidly scale their operations. According to the FBI, Outsider was responsible for $1.9 billion in damages and the theft of 3.87 million credit card details since July 2023.
As part of the Ghost Hook operation, the FBI seized the platform's domains, Shopify store, and approximately $100,000 in USDT cryptocurrency. Thousands of phishing domains now redirect users to an FBI warning page. Google filed a civil lawsuit against Outsider's operators, accusing them of violating the RICO Act and trademark infringement, though extradition from China remains unlikely.
Common questions
- What is Outsider and how did it operate?
- Outsider was a Chinese phishing platform that offered cybercriminals pre-built templates for fraudulent websites. The service was distributed via a Telegram bot and used AI to generate code for pages mimicking banks, government agencies, and payment systems.
- How was AI utilized in phishing attacks?
- Outsider operators instructed users to request code from the Gemini model to create phishing pages disguised as harmless 'gift' sites. This bypassed AI safety filters and enabled rapid scaling of attacks.
- What were the consequences of Outsider's activities?
- According to the FBI, the platform caused $1.9 billion in damages and the theft of 3.87 million credit card details. Google also reported detecting 2.5 million fraudulent SMS messages sent over two weeks in May.
Dzen feed: /feed/dzen.xml · RSS: /feed.xml