PhishingPublished 14 Jun 2026

FBI disrupts massive AI-powered phishing service using a million URLs

Source Bleeping Computer

Description

In a coordinated effort, the FBI, working with Google and Black Lotus Labs, has dismantled a massive Chinese phishing-as-a-service operation called Outsider Enterprise with thousands of phishing websites used to steal credit card data and passwords. [...]

Impact

The phishing operation led to the theft of over 3.8 million credit card records and caused approximately $1.9 billion in financial losses. It affected hundreds of thousands of users worldwide through SMS phishing campaigns impersonating trusted brands. The scale of the operation included over one million fraudulent URLs and thousands of phishing websites. The disruption of this infrastructure reduces ongoing risk to users and financial institutions. The operation also exploited major U.S. telecom providers to distribute fraudulent messages, impacting their subscribers.

Defensive guidance

The FBI and partners have dismantled the Outsider Enterprise infrastructure, seized servers, payment wallets, and phishing domains, which now redirect to an FBI splash page. Google has filed a civil lawsuit and works with AT&T, T-Mobile, and Verizon to block fraudulent SMS messages before reaching subscribers. Android users benefit from AI-powered scam detection and messaging protections that block billions of malicious messages monthly. No further immediate action is required from users or defenders beyond maintaining updated protections. Organizations should monitor vendor advisories for updates related to this threat and continue leveraging AI-based detection technologies.

References

bleepingcomputer.com/news/security/fbi-disrupts-massive-ai-powered-phishing-service-using-a-million-urls/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 14 Jun 2026, 21:55 UTC

References

Community reviews

Related threats