Nigerian Cybercrime Ring Raked in $100K with Fake Microsoft Login Pages
A sophisticated cybercrime operation based in Nigeria, dubbed RaccoonO365, has been dismantled by Microsoft after reportedly earning over $100,000. The ring specialized in creating and leasing out convincing fake Microsoft 365 login pages, enabling scammers worldwide to steal user credentials. This operation highlights the growing trend of phishing-as-a-service (PhaaS), where technically skilled criminals provide phishing tools to less sophisticated actors, broadening the reach of cyberattacks.
RaccoonO365’s Phishing-as-a-Service Model
Since its launch in July 2024, RaccoonO365 facilitated a global network of cybercriminals by providing meticulously crafted fake Microsoft-branded emails and websites designed to steal login credentials. Microsoft, in collaboration with Cloudflare, executed a coordinated legal and technical takedown, seizing 338 websites associated with the operation. These websites, virtually indistinguishable from legitimate Microsoft login pages, were distributed through various methods including deceptive emails, malicious QR codes, and infected attachments. Microsoft reports that the system was used to steal over 5,000 login credentials from users spanning 94 countries. The stolen information was likely then sold on the dark web, further fueling illicit activities.
This case underscores the evolving sophistication of cybercrime in Africa and the importance of international collaboration in combating these threats. The dismantling of RaccoonO365 serves as a crucial step in disrupting phishing operations and protecting users from credential theft on a global scale.
Keywords
Related Keywords: Nigerian cybercrime, fake Microsoft login, phishing scam, 100K fraud, Microsoft phishing, cybercrime ring, BEC scam Nigeria, email fraud, Microsoft login scam, online fraud Nigeria
