{"id":227490,"date":"2025-12-20T01:18:32","date_gmt":"2025-12-20T07:18:32","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2025\/12\/nigeria-arrests-raccoono365-phishing-developer-linked-to-microsoft-365-attacks"},"modified":"2025-12-20T01:18:32","modified_gmt":"2025-12-20T07:18:32","slug":"nigeria-arrests-raccoono365-phishing-developer-linked-to-microsoft-365-attacks","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2025\/12\/nigeria-arrests-raccoono365-phishing-developer-linked-to-microsoft-365-attacks","title":{"rendered":"Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/nigeria-arrests-raccoono365-phishing-developer-linked-to-microsoft-365-attacks.jpg\"><\/a><\/p>\n<p>Authorities in Nigeria have announced the arrest of three \u201chigh-profile internet fraud suspects\u201d who are alleged to have been involved in phishing attacks targeting major corporations, including the main developer behind the RaccoonO365 phishing-as-a-service (PhaaS) scheme.<\/p>\n<p>The Nigeria Police Force National Cybercrime Centre (NPF\u2013NCCC) said investigations conducted in collaboration with Microsoft and the Federal Bureau of Investigation (FBI) led to the identification of Okitipi Samuel, also known as Moses Felix, as the principal suspect and developer of the phishing infrastructure.<\/p>\n<p>\u201cInvestigations reveal that he operated a Telegram channel through which phishing links were sold in exchange for cryptocurrency and hosted fraudulent login portals on Cloudflare using stolen or fraudulently obtained email credentials,\u201d the NPF <a href=\"https:\/\/twitter.com\/PoliceNG\/status\/2001681791325753763\" rel=\"noopener\" target=\"_blank\">said<\/a> in a post shared on social media.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Authorities in Nigeria have announced the arrest of three \u201chigh-profile internet fraud suspects\u201d who are alleged to have been involved in phishing attacks targeting major corporations, including the main developer behind the RaccoonO365 phishing-as-a-service (PhaaS) scheme. The Nigeria Police Force National Cybercrime Centre (NPF\u2013NCCC) said investigations conducted in collaboration with Microsoft and the Federal Bureau [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1761,34,418],"tags":[],"class_list":["post-227490","post","type-post","status-publish","format-standard","hentry","category-cryptocurrencies","category-cybercrime-malcode","category-internet"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/227490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=227490"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/227490\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=227490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=227490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=227490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}