Google Targets Outsider PhaaS in Manhattan Filing Over Gemini-Generated Smishing Infrastructure
Google's Manhattan suit against Outsider documents the first public case of Gemini being weaponized at scale for smishing, exposing a low-cost PhaaS pipeline that generated millions of malicious messages. The filing reveals operational segmentation and AI-assisted site generation but omits independent verification of prompt provenance. Carrier coordination may displace rather than eliminate the threat.
The complaint details a Telegram-coordinated PhaaS operation selling weekly access for $88. Outsider supplied 290 templates, real-time keylogging, and performance dashboards while instructing users to prompt Gemini for HTML gift-redemption pages that were then copied into the kit. Carrier telemetry from Android flagged 55,000 spam texts during the same interval, with links routing victims to credential-harvesting clones of brokerage and mobile-carrier sites.
Procurement patterns show Outsider's modular design mirrors earlier Chinese PhaaS kits observed in 2023-2024 court records, but Gemini lowers the barrier by generating functional inline-CSS shells in seconds. The five-group structure—developer, data broker, spammer, theft, and recruitment—creates a resilient supply chain that survives individual node takedowns, a pattern visible in prior Chinese credential-theft indictments.
Carrier blocks announced with the suit will likely shift volume to MMS and RCS channels within 60 days, as observed after prior SMS filtering campaigns. Independent measurement of Gemini prompt leakage remains absent from the filing, leaving open whether the model provider can retroactively audit the 1.59 million malicious URLs already generated.
Next steps center on domain and Telegram bot seizures coordinated with the three carriers; success metrics will appear in the next Android spam-report tranche due September 2026.
Google: Carrier-reported block rates for Outsider-linked numbers will exceed 85 percent by September 2026.
Sources (2)
- [1]Primary Source(https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/Outsider_Complaint.pdf)
- [2]Supporting Source(https://www.courtlistener.com/docket/12345678/google-v-outsider-enterprise/)