Return to Threats

FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service

securityweek.com 2026-06-15 malicious AI use Critical

What Happened

The platform used more than 9,000 phishing sites, stealing nearly 4 million credit cards and causing roughly $1.9 billion in losses. The post FBI, Google Dismantle ‘Outsider Enterprise’ Phishing Service appeared first on SecurityWeek .

Why It Matters

According to the report, the FBI, Google, and partners dismantled the China-based 'Outsider Enterprise' phishing-as-a-service platform, which used over 8,000–9,000 phishing domains and sites to steal an estimated 3.87 million credit cards and cause roughly $1.9 billion in fraud losses since mid-2023.[1][3][5] Other sources indicate Outsider Enterprise weaponized AI tools, including Google's Gemini, to generate phishing content and scale operations via 9,000 fake sites, 1 million domains, and millions of scam texts.[2][3][6] From a CyberSE.AI perspective, this illustrates how commercially available AI and turnkey phishing kits can drastically lower the barrier to large-scale, global fraud campaigns, making AI-powered social engineering a critical threat vector for enterprises. Organizations should continuously red team their email, SMS, and web channels against AI-generated phishing, and ensure CISOs have specific policies, controls, and vendor requirements addressing AI-assisted fraud and phishing-as-a-service ecosystems.

Healthcare Fintech SaaS SMB AI startups

CyberSE Analysis

This signal maps to malicious AI use. Organizations using AI agents, LLM APIs, SaaS integrations, or sensitive data workflows should review whether this class of issue could create unauthorized tool execution, data leakage, weak approval gates, or unmanaged supply-chain exposure.

Recommended Actions

  • Restrict AI agent tool permissions and production write paths.
  • Review sensitive data access across prompts, logs, embeddings, memory, and SaaS integrations.
  • Add human approval workflows for high-impact or state-changing actions.
  • Run prompt injection and indirect prompt injection tests against affected workflows.
  • Document the owner, control gap, and remediation deadline for this risk class.

Source

https://www.securityweek.com/fbi-google-dismantle-outsider-enterprise-phishing-service/

Talk to AI CISO