Nigerian Police Arrest Developer of Raccoon0365 Phishing Platform Targeting Microsoft 365
- Securityish
- Scams & Fraud
Quick Summary
Nigerian police arrested three individuals linked to the Raccoon0365 phishing platform, which targeted Microsoft 365 accounts. This operation, aided by intelligence from Microsoft and the FBI, disrupted a service responsible for over 5,000 account compromises across 94 countries. The arrested developer, Okitipi Samuel, sold phishing kits on Telegram and used compromised credentials to host phishing pages, highlighting ongoing cyber threats to organizations worldwide.
The Securityish Brief
The Nigerian police recently arrested three individuals connected to the Raccoon0365 phishing platform, which specifically targeted Microsoft 365 users. This platform was responsible for at least 5,000 account compromises across 94 countries, leading to significant business email compromise and financial losses. The arrests were made possible through intelligence shared by Microsoft with the Nigeria Police Force National Cybercrime Centre (NPF–NCCC) via the FBI.
One of the suspects, Okitipi Samuel, known online as “RaccoonO365,” is believed to be the developer of the phishing toolkit. He operated a Telegram channel with over 800 members, selling phishing kits for fees ranging from $355 per month to $999 for three months. The phishing service was disrupted last September by Microsoft and Cloudflare, although it remains unclear if this operation directly led to the arrests.
The Raccoon0365 platform automated the creation of fake Microsoft login pages, facilitating credential theft. This incident underscores the persistent threat of phishing attacks, particularly those targeting widely used platforms like Microsoft 365. Organizations and users must remain vigilant against such tactics that exploit trust in legitimate services.
Understanding the Risks
This event highlights the ongoing risk of phishing scams that can lead to data breaches and financial losses. Users should be aware that phishing attempts can come in various forms, including emails and messages that mimic legitimate services. The use of compromised credentials to host phishing pages further emphasizes the importance of maintaining strong, unique passwords and enabling multi-factor authentication.
Organizations should regularly educate employees about recognizing phishing attempts and encourage them to report suspicious communications. Monitoring account activity for unauthorized access can help mitigate the impact of such attacks. Additionally, companies should consider implementing advanced security measures to protect sensitive information and reduce the risk of business email compromise.
Key Takeaways
- Regularly educate employees on how to recognize phishing attempts and report suspicious communications.
- Implement multi-factor authentication for all accounts, especially for Microsoft 365 users.
- Monitor account activity for any unauthorized access or unusual behavior.
- Encourage the use of strong, unique passwords across all platforms to prevent credential theft.
- Consider advanced security measures to protect sensitive organizational data from phishing attacks.
Key Terms & Concepts
- Raccoon0365: In this article, Raccoon0365 refers to a phishing platform that targeted Microsoft 365 accounts for credential theft.
- Business Email Compromise: Business Email Compromise is a type of scam where attackers impersonate a legitimate business to steal sensitive information or funds.
- Phishing Kit: A phishing kit is a set of tools used by cybercriminals to create fake login pages and steal user credentials.
- Telegram Channel: In this context, a Telegram channel is a messaging platform used by the suspect to sell phishing kits to other cybercriminals.
Read the original article here: https://www.bleepingcomputer.com/news/security/nigeria-arrests-dev-of-microsoft-365-raccoon0365-phishing-platform/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
