Google has filed a lawsuit against an alleged Chinese cybercriminal group, dubbed ‘Outsider Enterprise’, accused of running AI-powered phishing and fraud operations via Telegram. The group is alleged to have sent millions of scam texts impersonating trusted brands, exploiting Google’s infrastructure in the process. The case highlights the growing use of AI tooling to scale phishing campaigns and the legal avenues platforms are increasingly pursuing against threat actors.

Security Architect’s Take: Review your organisation’s brand monitoring and anti-phishing controls, particularly around SMS/smishing vectors and any services exposed via Telegram bots. Ensure employees and customers are educated on impersonation risks, and consider threat intelligence feeds that flag AI-generated phishing infrastructure targeting your sector.

Original advisory: Google fires sueball at alleged Chinese phishers over AI-powered fraud ops