Google and partners shut down Outsider phishing kit

Published September 3, 2026

Google and partners shut down Outsider, a service that created fake login pages to trick users into entering their real passwords. The operation removed 700 pages used to steal credentials.

Report priority
Medium

How it works

Attackers used a service called Outsider to quickly build fake login pages that look like real sites, then sent users to them via phishing emails or messages.

What to do

If you clicked a suspicious link in the last year and entered credentials on a fake page, check if your accounts were used elsewhere.

Watch for notices from your email or account providers about suspicious logins. If you reused passwords, change them on all sites where you used the same one.