Adversary Intelligence — 2026-06-13

FBI and Google Dismantle China-Based Outsider Cybercrime Network Responsible for $1.9 Billion in Losses

BLUFNamed indictments against Outsider operators remain unlikely within 12 months, as the China-based nexus and unknown identities leave infrastructure seizures as a disruption tool rather than a prosecution pathway.

The FBI, Google, and Lumen Technologies on Friday seized Outsider Enterprise's administrative domains, a Shopify storefront, and approximately $100,000 in payment wallets under Operation Ghost Hook 1. FBI officials attributed 3.87 million stolen credit cards and an estimated $1.9 billion in losses across 55 countries to the China-based phishing-as-a-service platform, which has been operational since July 2023 12. Outsider's kit, sold at $88 per week, provided more than 290 pre-built fake-site templates and guides for using Google's own Gemini and other AI platforms to generate phishing lures impersonating telecoms, financial institutions, and government agencies 23. Google filed a civil complaint in the Southern District of New York the same day, charging racketeering and wire fraud against operators whose real identities remain unknown 24.

Analysis
Named indictments against Outsider operators are unlikely within 12 months of Operation Ghost Hook. The attribution barrier is structural: identities remain unknown per the complaint itself, China's nexus forecloses extradition, and the compartmented franchise model disperses attribution signals across jurisdictions. Moderate confidence rests on two convergent indicators: Google's explicit admission and the absence of any US-China extradition framework. All reporting derives from Google's own filing and blog post, constraining confidence in loss figures Google has a litigation interest in advancing. The FBI likely holds more complete actor attribution than disclosed, having chosen infrastructure disruption over charges to protect collection equities. Named indictments would activate Treasury sanctions authority and allied extradition mechanisms against specific individuals. A NO resolution leaves civil injunction as the enforcement ceiling for China-based PhaaS actors.
5 sources
  1. FBI takes down massive China-based cybercrime network that caused $1.9B in losses - CyberScoop
  2. Chinese cybercrime operation that used AI to scam 'hundreds of thousands of victims' sued by Google - TechCrunch
  3. Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing - The Hacker News
  4. Google sues China-based scammers over Gemini AI abuse - Help Net Security
  5. How Google is combatting AI scams and dismantling the "Outsider Enterprise"

View in full brief →

UNCLASSIFIED // OPEN SOURCE