Google Is Suing Chinese Scammers Who Are Using Gemini - Schneier on Security Schneier on Security Menu Blog Newsletter Books Essays News Talks Academic About Me Search Powered by DuckDuckGo Blog Essays Whole site Subscribe Home Blog Google Is Suing Chinese Scammers Who Are Using Gemini Not sure this will have any effect, but I support the effort: According to Google’s legal filing, Outsider Enterprise operates through Telegram. The group offers phishing-as-a-service to individuals who may not be technically savvy enough to set up fraudulent websites and text campaigns on their own. In its Telegram channels, Outsider Enterprise reportedly provided instructions on how to use Google’s Gemini AI to create websites that imitate those of Google, YouTube, and government agencies such as New York’s E-ZPass. The group offered nearly 300 scam templates. […] Google worked with AT&T, Verizon, and T-Mobile to block many of these malicious text messages, and Google notes that its on-device scam detection in Google Messages probably helped reduce the number of successful phishing attempts, too. This AI-powered feature apparently stops 10 billion scam texts every month, so it’s fair to expect it caught at least some Outsider Enterprise activity. Another article . Tags: AI , China , courts , cybercrime , phishing , scams Posted on July 7, 2026 at 6:43 AM • 6 Comments Comments Clive Robinson • July 7, 2026 8:30 AM @ Bruce, With regards, “Not sure this will have any effect” Basic science says all effects have causes. Likewise to build something solid and lasting it requires considered construction based on solid foundations. So whilst the effect may not be immediate or obvious initially, if it forms a solid foundation then more can be built upon it. KC • July 7, 2026 11:27 AM The company has called out seven different potential federal laws … Love that you can set up alerts, for example on Congress.gov, to keep tabs on these. Big working group list proposed under the ‘National Strategy for Combating Scams Act’ ( H.R. 6425 / S. 3355). Reports required for ‘STOP Scams Against Seniors Act’ ( H.R. 6426 / S. 4821) … I guess they’re all bipartisan. Tris Simondsen • July 7, 2026 1:21 PM The reason Outsider Enterprise’s phishing-as-a-service ring is so effective isn’t just a failure of Google’s API moderation, it is a structural exploitation of how generative tensor architectures fundamentally process ambiguity. In a Zero-Trust architecture, we demand continuous validation of intent and authorization. But when a scammer prompts Gemini to generate an E-ZPass login page, the AI hits an unobservable information partition. It mathematically cannot observe the behavioral state of the user (e.g., a legitimate New York state developer vs. a malicious actor). The F-identifiable boundary is missing. Because modern LLMs cannot maintain epistemic caution, they suffer what the Observational Sufficiency Principle (OSP) formalizes as an Equal-Weight Failure. At the tensor layer, the model takes distinct, non-verifiable latent paths and flattens them into identical downstream vectors (TM1 = TM2). Instead of halting at the boundary of what it can prove, the model executes “latent completion”, arbitrarily inventing a default state to bridge the gap, which effectively launders the scammer’s intent into functional HTML/CSS. These scammers aren’t just bypassing content filters; they are weaponizing the AI’s architectural mandate to guess. This mathematically voids the Zero-Trust Evidence Contract, meaning we can never rely on the “execute” layer of a generative model to self-regulate security boundaries. It cannot recognize its own epistemic limits. Please see below for the complete formal proof on why this tensor-level latent completion structurally breaks Zero-Trust: https://trissimondsen.wordpress.com/2026/07/06/the-equal-weight-failure-how-ai-latent-completion-voids-the-zero-trust-evidence-contract/ Treating this as a moderation problem misses the physics of the issue. Generative AI architecture is currently incompatible with Zero-Trust. Your thoughts? Rontea • July 7, 2026 2:34 PM Law enforcement coordination and proactive industry measures, like Google’s collaboration with carriers and on-device detection, are essential, but the scale of these operations shows that defensive efforts alone can’t fully close the gap. We’re moving into an era where AI-driven attacks will adapt as quickly as we counter them. Civil actions and domain takedowns are important signals, but without parallel international legal frameworks and cooperation, the risk remains high. Public education—and the ability to validate digital trust at scale—will likely be as important as any technical safeguard to keeping users safe. lurker • July 7, 2026 2:50 PM Suing a handful of named Chinese in a New York court seems like a pretty futile way to end this madness. Google makes guns. People use them to shoot other people. Nothing to see here. Move along please. Anonymous • July 7, 2026 6:55 PM Meanwhil3 in a $hyt3h0l3 called m0rm0n1$t@n…. The TERRORISTS HAVE TAKEN OVER THE LAW ENFORCEMENT AND JUDICIAL BRANCH AND HAVE DELIBERATELY, WITH THEIR HATE, LIES, AND COVER-UPS DESTROYED A DECENT AND LAW ABIDING FAMILY. S33 h3r3 for d3tails: s h o r t u r l at / M D v F x Please guys, if any one of you knows of an attorney with credentials to represent clients in the Supreme Court of the United States – please share this with them and have them contact my friend in case they see and recognize this tragedy and discrimination which resulted in the destruction of a decent, law abiding American man and his family. s h o r t u r l at / M D v F x Let us bankrupt the State of m0rm0n1$t@n for NOT RESPECTING THE RULE OF L@W and 3v1d3nc3 BY USING FAK3 3v1d3nc3 AND LIES OF FAKE VICTIMS TO DESTROY MY FRIEND AND HIS FAMILY! My Friend is willing to sign a document that will promise FIFTY-FIFTY monetary compensation when disbursing the damages awarded to him between him and his Attorney. He’s willing to split it half-way, no matter the amount. Please guys. Thanks a lot. Subscribe to comments on this entry Leave a comment Cancel reply Blog moderation policy Login Name Email URL: Remember personal info? Fill in the blank: the name of this blog is Schneier on ___________ (required): Comments: Allowed HTML <a href="URL"> • <em> <cite> <i> • <strong> <b> • <sub> <sup> • <ul> <ol> <li> • <blockquote> <pre> Markdown Extra syntax via https://michelf.ca/projects/php-markdown/extra/ Notify me of follow-up comments by email. Notify me of new posts by email. Δ ← France to Stop Certifying Non-Quantum-Safe Encryption Sidebar photo of Bruce Schneier by Joe MacInnis. Powered by WordPress Hosted by Pressable About Bruce Schneier I am a public-interest technologist , working at the intersection of security, technology, and people. I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998. I'm a fellow and lecturer at Harvard's Kennedy School , a board member of EFF , and the Chief of Security Architecture at Inrupt, Inc. This personal website expresses the opinions of none of those organizations. Contact Info Related Entries The Realities of AI Video Surveillance AI and Liability Embedding Forbidden Text in Spyware to Discourage AI Analysis Anthropic's Fable 5 Model Jailbroken Within Days Anthropic's Fable and the State of AI Featured Essays Four Ways AI Is Being Used to Strengthen Democracies Worldwide The CrowdStrike Outage and Market-Driven Brittleness How Online Privacy Is Like Fishing How AI Will Change Democracy Seeing Like a Data Structure LLMs’ Data-Control Path Insecurity AI and Trust The Value of Encryption The Eternal Value of Privacy Terrorists Don't Do Movie Plots More Essays Blog Archives Archive by Month 100 Latest Comments Blog Tags 3d printers 9/11 A Hacker's Mind Aaron Swartz academic academic papers accountability ACLU activism Adobe advanced persistent threats advertising adware AES Afghanistan AI air marshals air travel airgaps al Qaeda alarms algorithms alibis Amazon Android anonymity Anonymous antivirus Apache Apple More Tags Latest Book More Books Blog Newsletter Books Essays News Talks Academic About Me

📌 来源: Schneier on Security | 📅 2026-07-07