IC Technology & Cyber — 2026-06-15

FBI Disrupts Chinese AI-Powered Phishing Network That Stole 3.8 Million Credit Card Records

BLUFInfrastructure seizure without arrests leaves Outsider's operators free to reconstitute, making a DOJ indictment naming identified principals by December genuinely uncertain given the absence of public attribution.

Google filed in Manhattan federal court on June 12 against "Outsider Enterprise," a China-based phishing-as-a-service network that used Gemini AI to generate fake websites targeting victims in 55 countries 1. FBI Assistant Director Brett Leatherman attributed 3.87 million compromised credit cards and $1.9 billion in losses since July 2023 to the network, noting actual losses are "much higher" than those figures 1. The platform sold subscription access via Telegram for $88 per week, with 290-plus templates impersonating banks, government agencies, and telecom providers, alongside tutorials for using Gemini to generate fake site HTML 1. Operation Ghost Hook seized core admin domains, a Shopify storefront, and roughly $100,000 from Outsider payment wallets; the FBI also accessed Outsider's own Telegram bot to gather customer data 12.

Analysis
An indictment naming Outsider principals by December 12, 2026 is genuinely uncertain: Operation Ghost Hook seized infrastructure but left operators untouched, and FBI access to customer-side Telegram data has not produced public attribution. Confidence is low, grounded in the absence of reported arrests or identified suspects and dependence on non-public collection. Sourcing traces to a single origin, Google's own complaint and blog post, with no independent government corroboration outside FBI statements embedded in that filing. The network's four-division corporate structure and tiered subscriber pricing are more consistent with a state-tolerated enterprise under Chinese law enforcement permissiveness than with independent criminal infrastructure. Without an indictment, Treasury and State lack a sanctions predicate, and financial institutions must size defensive investment against durable adversary infrastructure.

3 sources