Google Sues China-Based Cyber Ring Over ‘Weaponised’ Gemini AI Scams

Tech giant Google is taking legal action in the United States against a sophisticated, China-based cybercrime syndicate accused of weaponising its proprietary artificial intelligence tool, Gemini, to orchestrate massive financial scams.

The lawsuit, filed in the US District Court for the Southern District of New York, targets an organised network known as the 'Outsider Enterprise'. The group allegedly utilised Google's AI technology to generate and distribute highly convincing phishing messages, defrauding hundreds of thousands of smartphone users globally.

According to legal documents, the network operated primarily out of China, coordinating its illicit activities via the encrypted messaging platform Telegram. The group specialised in creating and distributing "phishing kits," which enabled cybercriminals to deploy automated, large-scale text messaging campaigns. These deceptive messages mimicked trusted brands-including Google itself-to trick unsuspecting victims into surrendering passwords and credit card details.

Common tactics employed by the syndicate included sending fraudulent parcel delivery alerts, urgent banking warnings, and fabricated security notifications regarding compromised accounts.

Google's internal cybersecurity teams revealed the staggering scale of the operation. Financial losses resulting from the scams are estimated to run into millions of dollars. Within just a two-week period last May, the enterprise transmitted approximately 2.5 million messages containing fraudulent links to Android users. During the same timeframe, Android systems flagged 55,000 spam texts tied to the network-averaging more than two complaints every minute. Investigators have successfully linked the criminal group to over 9,000 counterfeit websites and more than one million fraudulent URLs.

In a public statement, Google confirmed it is taking a multi-front approach to dismantle the syndicate's infrastructure. The tech firm is actively coordinating with the US Federal Bureau of Investigation (FBI), which is spearheading concurrent law enforcement actions. Furthermore, Google is collaborating with major telecommunications providers, including AT&T, T-Mobile, and Verizon, to intercept and block the fraudulent text messages before they reach consumers.

"Litigation alone won't end this," Google stated, emphasizing that civil lawsuits are only part of a broader strategy. The company announced it is actively advocating for tougher federal legislation in the United States to establish permanent, industry-wide protections against AI-driven cybercrime.

The case highlights growing concerns amongst cybersecurity experts regarding the exploitation of generative artificial intelligence by global criminal enterprises to scale and refine social engineering attacks. Proceedings in the New York district court are expected to commence in the coming months.