Google Lawsuit Cites 9,000 Fake Websites Linked to Phishing Operation

Google has launched a major legal offensive against an alleged international cybercrime operation accused of orchestrating large-scale phishing attacks that targeted internet users through fake websites, deceptive text messages, and artificial intelligence-powered scams.

According to the technology giant, the lawsuit is aimed at dismantling a sophisticated criminal network known as the “Outsider Enterprise,” which is allegedly responsible for stealing sensitive information, including passwords, payment card details, and personal data from victims across multiple regions.

Thousands of Fake Websites Identified

Google claims its security teams uncovered an extensive digital infrastructure supporting the operation. Investigators reportedly traced approximately 9,000 fraudulent websites and more than one million malicious URLs connected to the network.

The company alleges that the group distributes phishing toolkits that enable cybercriminals to launch convincing scams at scale. These fraudulent campaigns often impersonate trusted organizations and well-known brands, making it difficult for users to distinguish legitimate communications from malicious ones.

Google stated that the operation has already resulted in significant financial losses for consumers, amounting to millions of dollars.

AI and Messaging Platforms Used in Fraud Campaigns

The lawsuit alleges that the cybercrime network operates from China and uses messaging platforms to coordinate activities and distribute phishing resources.

Security investigators claim the group leveraged artificial intelligence technologies to enhance the effectiveness of its scams. By using AI-generated content and automated phishing tools, attackers were reportedly able to create more convincing messages and fake websites designed to trick users into revealing confidential information.

These campaigns primarily relied on text-message phishing, commonly known as “smishing,” where victims receive fraudulent messages containing links to counterfeit websites.

Millions of Suspicious Messages Detected

Google reported a sharp increase in phishing-related activity during a recent monitoring period. The company said Android users submitted reports of approximately 55,000 spam text messages within a two-week timeframe.

During the same period, security systems identified around 2.5 million text messages containing links associated with websites allegedly created by the Outsider Enterprise network.

The scale of the operation highlights the growing sophistication of cybercriminal groups that increasingly use automated technologies to expand their reach and target larger numbers of victims.

FBI Supports Ongoing Investigation

Google confirmed it is working closely with the Federal Bureau of Investigation (FBI) to disrupt the network and identify those responsible.

Cybersecurity officials have warned that criminals are rapidly adopting artificial intelligence tools to make online scams more believable and harder to detect. Law enforcement agencies believe stronger collaboration between technology companies, telecommunications providers, and government authorities is essential to combating these evolving threats.

An FBI Cyber Division representative noted that cybercriminal groups are increasingly building organized business models around impersonating trusted brands and exploiting consumer trust for financial gain.

Collaboration With Telecom Providers

Beyond legal action, Google is expanding partnerships with major telecommunications companies to strengthen protections against fraudulent messages and online scams.

The company said it will continue working with industry stakeholders to block malicious communications before they reach consumers and support legislative efforts aimed at improving long-term cybersecurity protections.

As phishing attacks become more sophisticated through the use of artificial intelligence and automated tools, cybersecurity experts continue to urge users to verify links, avoid sharing sensitive information through unsolicited messages, and report suspicious activity immediately.