According to Nivo News, the Nigeria Police Force National Cybercrime Centre (NPF–NCCC) has arrested high-profile cybercrime suspects linked to a sophisticated Microsoft 365 phishing operation that targeted the email systems of major corporate organisations.....KINDLY READ THE FULL STORY HERE▶

The arrests followed actionable intelligence received from Microsoft Corporation in the United States through the Federal Bureau of Investigation, which exposed the deployment of an advanced phishing toolkit known as RaccoonO365. The toolkit was designed to create counterfeit Microsoft login pages capable of harvesting user credentials and unlawfully accessing corporate, financial, and educational email platforms.

Briefing journalists in Abuja on Thursday, the Force Public Relations Officer, CSP Benjamin Hundeyin, disclosed that the cybercrime centre launched a coordinated, intelligence-led operation in partnership with Microsoft, the FBI, and the United States Secret Service. He explained that investigations traced multiple cases of unauthorised Microsoft 365 account access recorded between January and September 2025 to phishing emails crafted to closely mimic legitimate Microsoft authentication portals.

According to police findings, the cyberattacks resulted in business email compromise, data breaches, and significant financial losses across several jurisdictions. Acting on precise intelligence, NPF–NCCC operatives conducted targeted operations in Lagos and Edo states, leading to the arrest of three suspects. Searches carried out at their residences yielded laptops, mobile phones, and other digital devices, which forensic analysis directly linked to the fraudulent activities.

Further investigations identified Okitipi Samuel, also known by the aliases “RaccoonO365” and “Moses Felix,” as the principal suspect and alleged developer of the phishing infrastructure. Police said he operated a Telegram channel through which phishing links were sold in exchange for cryptocurrency and hosted fake login portals on Cloudflare using stolen or fraudulently obtained email credentials.

The police clarified that there was no evidence connecting the two other arrested individuals to the creation or management of the phishing scheme. The Nigeria Police Force reiterated its commitment to protecting the country’s digital environment through the use of advanced technology, enhanced international cooperation, and thorough investigative and prosecutorial processes aimed at combating evolving cyber threats.