Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

FBI takedown of Outsider Enterprise phishing service

Law Enforcement
First reported
Last updated
Happening score
H score 63
1 unique sources, 1 articles

Summary

Hide ▲

The FBI and partners dismantled Outsider Enterprise, a phishing-as-a-service operation tied to thousands of phishing websites and large-scale credential theft. The takedown seized infrastructure, domains, wallets, and a Telegram bot, disrupting a network that had operated since at least 2023. The disruption cuts off a service blamed for millions of stolen credit card records and $1.9 billion in estimated losses.

Related Happenings

Google civil lawsuit against Outsider Enterprise

Regulatory/Legal Action
H score55 First: 14.06.2026 17:36 Last: 14.06.2026 17:36 Sources 1

How related: The tech giant has filed a civil lawsuit targeting the operation’s infrastructure, and is coordinating with telecommunications service providers AT&T, T-Mobile, and Verizon to block fraudulent messages before they reach to subscribers.

About this happening: **Google** filed a **civil lawsuit** against **Outsider Enterprise**, adding legal pressure to a major **phishing infrastructure** operation that sent fraudulent texts at scale. T...

Open Happening

Outsider Enterprise-Outsider-Chinese cybercrime alliance reshapes ransomware ecosystem operations

Threat Actor Meta
H score69 First: 12.06.2026 21:59 Last: 12.06.2026 21:59 Sources 1

How related: Outsider Enterprise has been active since at least 2023 and operated at a massive scale, with Google linking to it 9,000 fake websites and more than a million fraudulent URLs.

About this happening: The **Outsider Enterprise** is a **Chinese phishing-as-a-service** operation that used **Telegram**, **AI**, and distributed phishing kits to run large-scale brand-impersonation c...

Open Happening

Outsider Telegram-run smishing campaign targeting Americans

Campaign
H score53 First: 12.06.2026 21:59 Last: 12.06.2026 21:59 Sources 1

How related: The cybercrime operation used AI and distributed phishing kits for campaigns impersonating various trusted brands in texts sent through AT&T, T-Mobile, and Verizon.

About this happening: The **Outsider Enterprise** happening is a **phishing-as-a-service** campaign tied to a **Chinese cybercrime network** that used **AI** and distributed phishing kits to impersonat...

Latest development: 14.06.2026 17:36

The FBI, working with Google and Black Lotus Labs, dismantled Outsider Enterprise, a Chinese phishing-as-a-service operation that used AI and distributed phishing kits to impersonate trusted brands in texts sent through AT&T, T-Mobile and Verizon. The takedown included seizures of administration servers, a Shopify e-commerce storefront, a testing account, around $100,000 USDT and a Telegram bot linked to the service, while Google pursued civil action and coordinated with carriers to block fraudulent messages.

Open Happening

AudiA6 laundering ecosystem and Dark2Web forum

Threat Actor Meta
H score31 First: 11.06.2026 18:55 Last: 11.06.2026 18:55 Sources 1

About this happening: **AudiA6** was disrupted as an **industrial-scale cryptocurrency laundering service** used by **ransomware gangs** and other cybercriminal networks. Europol said the ecosystem lau...

Open Happening

DoJ Disruption Week crypto fraud takedown

Law Enforcement
H score46 First: 04.06.2026 09:06 Last: 04.06.2026 09:06 Sources 1

About this happening: Authorities **arrested** seven scammers in Thailand and disrupted a **crypto fraud** network tied to **Disruption Week**, expanding pressure on transnational scam operations targe...

Open Happening

Timeline

  1. 14.06.2026 17:36 2 articles · 2h ago

    FBI, Google, and Black Lotus Labs dismantle Outsider Enterprise

    Initial Disclosure

    FBI, Google, and Black Lotus Labs dismantled Outsider Enterprise, a Chinese phishing-as-a-service network that used AI and distributed phishing kits in SMS campaigns through AT&T, T-Mobile, and Verizon; the takedown seized multiple administration servers, a Shopify e-commerce storefront, an account used to test the phishing service, a Telegram bot, and about $100,000 USDT, while Google linked the operation to 9,000 fake websites, more than a million fraudulent URLs, hundreds of thousands of affected users worldwide, and losses from more than 3.8 million credit card records.

    Show sources
    Open in new tab