Google Sues Chinese Network Accused of Using Gemini in Outsider Smishing Campaign
Summary
Google sued a Chinese cybercrime network it accuses of using Gemini and the Outsider phishing-as-a-service kit for smishing. Google says the operation targeted more than 100,000 people and is working with U.S. carriers to block messages.
Key points
- Google filed a lawsuit in Manhattan federal court, accusing a Chinese cybercrime network of using Gemini to generate phishing pages and Outsider to run smishing campaigns.
- Google says the operation used texts impersonating trusted brands to direct recipients to fake sites and steal personal and financial information.
- Google estimates the scheme victimized more than 100,000 people and caused millions of dollars in losses.
- Google says it identified 9,000 fake websites and more than 1.59 million fraudulent URLs between November 14, 2025, and April 14, 2026.
- From May 18 to June 1, 2026, Android users flagged 55,000 spam texts, while the network sent Android users 2.5 million messages containing links to Outsider-generated sites, according to Google.
- Google says Outsider offers more than 290 impersonation templates, keystroke logging, and campaign tracking; access reportedly costs as little as $88 per week.
- Google says it is partnering with AT&T, T-Mobile, and Verizon to block the messages and is seeking to dismantle the network's infrastructure.
Article Details
- Event Type
- Google filed a lawsuit against an unnamed Chinese cybercrime network accused of operating the Outsider phishing-as-a-service kit and using Gemini to support smishing attacks.
- Impact
- Google says the operation impersonated trusted brands to steal personal and financial information. The schemes are estimated to have victimized more than 100,000 people and caused millions of dollars in losses. Google also reported identifying 9,000 fake websites and more than 1.59 million fraudulent URLs tied to the service, and said it is working with AT&T, T-Mobile, and Verizon to block related messages.
MITRE ATT&CK
People
Vendors
AT&TGoogle said it’s filing the lawsuit to dismantle the network’s infrastructure, and that it’s partnering with AT&T, T-Mobile, and Verizon to block such messages from reaching customers.GoogleGoogle has filed a lawsuit against a Chinese cybercrime network accused of using Gemini to generate phishing pages and power large-scale smishing campaigns through the Outsider phishing-as-a-service kit.T-MobileGoogle said it’s filing the lawsuit to dismantle the network’s infrastructure, and that it’s partnering with AT&T, T-Mobile, and Verizon to block such messages from reaching customers.VerizonGoogle said it’s filing the lawsuit to dismantle the network’s infrastructure, and that it’s partnering with AT&T, T-Mobile, and Verizon to block such messages from reaching customers.
Products
AndroidIn a two-week period from May 18 to June 1, 2026, Outside was responsible for 55,000 spam texts flagged by Android users.GeminiGoogle has filed a lawsuit against a Chinese cybercrime network accused of using Gemini to generate phishing pages and power large-scale smishing campaigns through the Outsider phishing-as-a-service kit.TelegramThe operation allegedly impersonated trusted brands, victimized more than 100,000 people, and relied on Telegram-coordinated groups to steal financial and personal information.
Tools
Countries
Chinaagainst China-based hackers behind a massive Phishing-as-a-Service (PhaaS) platform called Lighthouse that ensnared over 1 million users across 120 countries.United States“The criminals behind the Outsider Enterprise built a business out of impersonating trusted brands to defraud hundreds of thousands of victims,” said Brett Leatherman, assistant director of the U.S.