Police nab mastermind of RaccoonO365 phishing kit in major Microsoft 365 cyber bust
Abdullateef Fowewe
The Nigeria Police Force has arrested a notorious cybercriminal behind sophisticated attacks targeting Microsoft 365 email systems worldwide.
CSP Benjamin Hundeyin, Force Public Relations Officer at Force Headquarters, announced the breakthrough in a statement on Thursday titled: “NIGERIA POLICE APPREHENDS SUSPECT OVER MICROSOFT 365 CYBERATTACKS.”
The Nigeria Police Force National Cybercrime Centre (NPF–NCCC) apprehended high-profile internet fraud suspects following “credible and actionable intelligence received from Microsoft Corporation, United States of America, through the Federal Bureau of Investigation (FBI).”
This intel exposed the use of a phishing toolkit called RaccoonO365, “designed to create fraudulent Microsoft login portals aimed at harvesting user credentials and unlawfully accessing the email platforms of corporate, financial, and educational institutions.”
The coordinated raid, involving Microsoft, the FBI, and the United States Secret Service, traced unauthorised access to Microsoft 365 accounts from January to September 2025.
Phishing emails mimicking legitimate Microsoft pages led to “business email compromise, data breaches, and financial losses across multiple jurisdictions.”
Operatives swooped into Lagos and Edo States, arresting three suspects.
Raids on their residences yielded laptops, mobile devices, and digital equipment tied to the scheme via forensic analysis.
Key figure Okitipi Samuel, aliases “RaccoonO365” and “Moses Felix,” emerged as the principal suspect.
He allegedly ran a Telegram channel selling phishing links for cryptocurrency and hosted fake portals on Cloudflare using stolen credentials.
Hundeyin noted “no evidence linking the two other arrested individuals to the creation or operation of the phishing scheme.”
The police recovered incriminating devices and vowed tougher action.
Hundeyin reaffirmed, “The Nigeria Police Force reaffirms its steadfast commitment to safeguarding Nigeria’s digital space through the deployment of advanced technology, strengthened international partnerships, and diligent investigative and prosecutorial processes aimed at effectively countering evolving cyber threats.”
