The Nigerian police arrested three people linked to focused Microsoft 365 cyberattacks through Raccoon0365 phishing platform.
The assaults led to enterprise e mail compromise, knowledge breaches, and monetary losses affecting organizations worldwide.
The legislation enforcement operation was doable because of intelligence from Microsoft, shared with the Nigeria Police Drive Nationwide Cybercrime Centre (NPF–NCCC) through the FBI.
The authorities recognized people who administered the phishing toolkit ‘Raccoon0365,’ which automated the creation of faux Microsoft login pages for credential theft.
The service, which was accountable for not less than 5,000 Microsoft 365 account compromises throughout 94 international locations, was disrupted by Microsoft and Cloudflare final September.
It’s unclear if the disruption operation helped establish these behind Raccoon0365 in Nigeria.
BleepingComputer contacted Microsoft for clarifications however a remark wasn’t instantly obtainable.
“Performing on exact and actionable intelligence, NPF–NCCC operatives had been deployed to Lagos and Edo States, resulting in the arrest of three suspects,” reads the police’s announcement.
“Search operations performed at their residences resulted within the restoration of laptops, cellular gadgets, and different digital tools, which have been linked to the fraudulent scheme after forensic evaluation.”
One of many arrested suspects is a person named Okitipi Samuel, additionally identified on-line as “RaccoonO365” and “Moses Felix,” whom the police consider is the developer of the phishing platform.
Samuel operated a Telegram channel the place he offered phishing kits to different cybercriminals in trade for cryptocurrency, whereas he additionally hosted the phishing pages on Cloudflare utilizing accounts registered with compromised credentials.
The Telegram channel counted over 800 members across the time of the disruption, and the reported entry charges ranged from $355/month to $999/3 months.
Cloudflare estimates that the service is used primarily by Russia-based cybercriminals.
Concerning the opposite two arrested people, the police acknowledged they don’t have any proof linking them to the Raccoon0365 operation or creation.
The individual that Microsoft beforehand recognized because the chief of the phishing service, Joshua Ogundipe, isn’t talked about within the police’s announcement.
Damaged IAM is not simply an IT drawback – the affect ripples throughout your entire enterprise.
This sensible information covers why conventional IAM practices fail to maintain up with fashionable calls for, examples of what “good” IAM appears to be like like, and a easy guidelines for constructing a scalable technique.
