Alleged RaccoonO365 phishing kit developer apprehended

The Nigerian police's National Cybercrime Centre has arrested suspected RaccoonO365 phishing-as-a-service kit developer Okitipi Samuel and two others through information from the FBI, the U.S. Secret Service, and Microsoft, according to The Record, a news site by cybersecurity firm Recorded Future.

Aside from detaining Samuel, Nigerian police were also able to sequester mobile devices, laptops, and other digital equipment associated with the PhaaS scheme, which involved the sale of phishing links through a Telegram channel, as well as bogus Cloudflare-hosted login sites, said a spokesperson for the Nigerian police. Such a development comes three months after Microsoft was able to take down 338 RaccoonO365-related sites via court order.

Hundreds of domains leveraged by RaccoonO365 had also been disrupted by Cloudflare around the same time. At least 5,000 Microsoft credentials worldwide had already been pilfered by RaccoonO365 by September, noted Microsoft Digital Crimes Unit Assistant General Counsel Steven Masada.