Nigeria arrests suspected RaccoonO365 phishing kit developer on tip from Microsoft, FBI

A key developer linked to the RaccoonO365 phishing kit was arrested in Nigeria following coordinated efforts by Nigerian authorities, Microsoft, FBI, and U.S. Secret Service. The phishing platform was used to steal thousands of Microsoft credentials and execute business email compromises, with significant international cybercriminal activity detected. #RaccoonO365 #Microsoft #CybercrimeNigeria

Keypoints

The Nigerian police arrested Okitipi Samuel, a suspected key developer of the RaccoonO365 phishing infrastructure.
RaccoonO365 enabled cybercriminals to create fake Microsoft login pages to steal user credentials and bypass multi-factor authentication.
The phishing kit was sold via Telegram in exchange for cryptocurrency, targeting thousands of email accounts daily.
In September, Microsoft obtained court orders to seize hundreds of websites associated with RaccoonO365, disrupting the operation.
International law enforcement is investigating figures like Joshua Ogundipe, who is believed to lead the RaccoonO365 development effort.