Ryan Tomcik

CYBERCRIME: NIGERIA POLICE APPREHENDS SUSPECT OVER MICROSOFT 365 CYBERATTACKS The Nigeria Police Force National Cybercrime Centre (NPF–NCCC) has apprehended high-profile internet fraud suspects involved in targeted cyberattacks against the email systems of major corporate organisations through the deployment of phishing links and malicious software. This significant breakthrough followed credible and actionable intelligence received from Microsoft Corporation, United States of America, through the Federal Bureau of Investigation (FBI), which revealed the use of a sophisticated phishing toolkit known as RaccoonO365. The toolkit was designed to create fraudulent Microsoft login portals aimed at harvesting user credentials and unlawfully accessing the email platforms of corporate, financial, and educational institutions. Consequently, the NPF–NCCC initiated a coordinated, intelligence-driven operation in collaboration with Microsoft, the FBI, and the United States Secret Service. Investigations traced multiple incidents of unauthorised Microsoft 365 account access between January and September 2025 to phishing emails crafted to closely mimic legitimate Microsoft authentication pages. These activities resulted in business email compromise, data breaches, and financial losses across multiple jurisdictions. Acting on precise and actionable intelligence, NPF–NCCC operatives were deployed to Lagos and Edo States, leading to the arrest of three suspects. Search operations conducted at their residences resulted in the recovery of laptops, mobile devices, and other digital equipment, which have been linked to the fraudulent scheme after forensic analysis. Further investigations identified Okitipi Samuel, also known as “RaccoonO365” and “Moses Felix,” as the principal suspect and developer of the phishing infrastructure. Investigations reveal that he operated a Telegram channel through which phishing links were sold in exchange for cryptocurrency and hosted fraudulent login portals on Cloudflare using stolen or fraudulently obtained email credentials. Notably, investigations revealed no evidence linking the two other arrested individuals to the creation or operation of the phishing scheme. The Nigeria Police Force reaffirms its steadfast commitment to safeguarding Nigeria’s digital space through the deployment of advanced technology, strengthened international partnerships, and diligent investigative and prosecutorial processes aimed at effectively countering evolving cyber threats. CSP BENJAMIN HUNDEYIN, anipr, mipra
Force Public Relations Officer
Force Headquarters,
Abuja.   18th December, 2025.

Sometimes I take for granted that on our team we have real-time visibility into hundreds of simultaneous intrusions from every APT & FIN group on the planet. Including many right now from apex threat actors that others wait a lifetime to experience. I look at new intrusion sets every single day as far “left of boom” as you can imagine. The tough part is turning this into meaningful protection at scale, prioritizing within an endless sea of suspicious activity data, and not losing your mind & your creative edge along the way with what it will teach you about the state of the security industry.

Decided to deep fry the turkey this year hope it goes well.