The Nigerian police arrested three people linked to focused Microsoft 365 cyberattacks through Raccoon0365 phishing platform.
The assaults led to enterprise electronic mail compromise, knowledge breaches, and monetary losses affecting organizations worldwide.
The legislation enforcement operation was doable because of intelligence from Microsoft, shared with the Nigeria Police Drive Nationwide Cybercrime Centre (NPF–NCCC) through the FBI.
The authorities recognized people who administered the phishing toolkit ‘Raccoon0365,’ which automated the creation of faux Microsoft login pages for credential theft.
The service, which was chargeable for no less than 5,000 Microsoft 365 account compromises throughout 94 nations, was disrupted by Microsoft and Cloudflare final September.
It’s unclear if the disruption operation helped determine these behind Raccoon0365 in Nigeria.
BleepingComputer contacted Microsoft for clarifications however a remark wasn’t instantly obtainable.
“Appearing on exact and actionable intelligence, NPF–NCCC operatives had been deployed to Lagos and Edo States, resulting in the arrest of three suspects,” reads the police’s announcement.
“Search operations performed at their residences resulted within the restoration of laptops, cellular gadgets, and different digital gear, which have been linked to the fraudulent scheme after forensic evaluation.”
One of many arrested suspects is a person named Okitipi Samuel, additionally recognized on-line as “RaccoonO365” and “Moses Felix,” whom the police consider is the developer of the phishing platform.
Samuel operated a Telegram channel the place he bought phishing kits to different cybercriminals in alternate for cryptocurrency, whereas he additionally hosted the phishing pages on Cloudflare utilizing accounts registered with compromised credentials.
The Telegram channel counted over 800 members across the time of the disruption, and the reported entry charges ranged from $355/month to $999/3 months.
Cloudflare estimates that the service is used primarily by Russia-based cybercriminals.
Relating to the opposite two arrested people, the police said they don’t have any proof linking them to the Raccoon0365 operation or creation.
The person who Microsoft beforehand recognized because the chief of the phishing service, Joshua Ogundipe, is just not talked about within the police’s announcement.
Damaged IAM is not simply an IT downside – the influence ripples throughout your entire enterprise.
This sensible information covers why conventional IAM practices fail to maintain up with trendy calls for, examples of what “good” IAM seems like, and a easy guidelines for constructing a scalable technique.
