Nigeria arrests dev of Microsoft 365 'Raccoon0365' phishing platform

Nigerian police, acting on intelligence from Microsoft (shared via the FBI), arrested three individuals linked to Raccoon0365, a phishing-as-a-service that automated fake Microsoft 365 login pages and is tied to at least 5,000 account compromises across 94 countries causing business email compromise, data breaches, and financial losses; Microsoft and Cloudflare had previously disrupted the service. Authorities recovered laptops and mobile devices and allege one arrested person is the platform developer who sold phishing kits on Telegram and hosted phishing pages using compromised credentials, while the other two suspects were arrested with devices but not yet directly linked to creating the toolkit.