Microsoft and Cloudflare have collaborated to dismantle the RaccoonO365 phishing service, which targeted thousands of users worldwide. This joint effort involved legal action, domain seizures, and technical countermeasures to disrupt the operation and arrest its leader. #RaccoonO365 #PhishingAsAService
Keypoints
- RaccoonO365 was a phishing-as-a-service platform used to steal Microsoft 365 credentials.
- The operation earned over $100,000 in cryptocurrency and targeted at least 20 US healthcare organizations.
- Microsoft and Cloudflare coordinated legal actions, domain seizures, and security measures to shut down the service.
- The phishing scheme employed realistic email and website fakery that required little technical skill from users.
- Authorities identified and notified Nigerian programmer Joshua Ogundipe as the operation’s leader.
Read More: https://www.securityweek.com/raccoono365-phishing-service-disrupted-leader-identified/