Google has launched a lawsuit against a China-based cybercrime network it calls Outsider Enterprise, and the details are a wake-up call for every small business. The group allegedly sold a “phishing-for-dummies” toolkit named Outsider for as little as $88 a week (or $200 a month), letting people with almost no technical skill spin up convincing fake websites and blast out scam text messages.
Why this matters for your business
Phishing used to take some know-how. Now it is a paid subscription. According to Google’s complaint, the toolkit even leaned on AI to generate fake login pages impersonating banks, telcos, government agencies and Google itself. Between November 2025 and April 2026, Google found more than 1.59 million fraudulent web addresses tied to the group. In a single two-week stretch in May 2026, the operation sent an estimated 2.5 million scam texts. The FBI links the platform to roughly 3.87 million stolen credit cards since mid-2023.
The takeaway is simple: the barrier to running a believable scam has collapsed, so the volume of dodgy texts and emails hitting you and your staff will only grow.
Three practical steps
- Slow down on links. Treat any text or email asking you to “verify”, “pay” or “log in” as suspect. Type the website address in yourself rather than tapping the link.
- Turn on multi-factor authentication (MFA) for email, banking and accounting logins. Even if a password is phished, MFA blocks most account takeovers.
- Brief your team. A five-minute chat about what a scam text looks like is your cheapest and most effective defence.
Worried this affects your business? Get a free 15-minute IT check – call Trends IT on 0485 011 911 or visit /contact/.