In a significant cybersecurity operation, Microsoft, in collaboration with Cloudflare and U.S. law enforcement, has dismantled the RaccoonO365 phishing-as-a-service network. This service, operated by Nigerian national Joshua Ogundipe, enabled cybercriminals to conduct large-scale phishing campaigns targeting Microsoft 365 users worldwide. The takedown involved the seizure of 338 domains, disrupting the infrastructure of a service that had stolen over 5,000 credentials across 94 countries since its inception in July 2024.
Phishing-as-a-Service Model