Microsoft Inc said on Tuesday that it seized nearly 340 websites tied to a rapidly growing Nigerian-based service that allowed users to carry out phishing operations that stole at least 5,000 Microsoft user credentials
Microsoft (MSFT.O), opens new tab obtained an order from the U.S. District Court in Manhattan earlier this month to seize domains associated with Raccoon0365, the subscription service that allowed users to carry out massive phishing campaigns, which sometimes involved thousands of emails at a time, according to Steven Masada, assistant general counsel for Microsoft’s Digital Crimes Unit.
Raccoon0365’s service, which operates through a private Telegram channel with more than 850 subscribers, enables users to impersonate trusted brands and get targets to enter Microsoft login credentials on phony Microsoft login pages, Masada said in a blog, opens new tab posted on Microsoft’s website.
The service has generated for its small group of operators at least $100,000 in cryptocurrency payments since launching in July 2024, Masada said in the blog.
Microsoft said the seizure of the websites occurred over a period of days earlier this month.
Microsoft identified Nigeria-based Joshua Ogundipe as the leader and main operator of Raccoon0365.
Ogundipe did not immediately respond to an email request for comment sent to the email address identified by Microsoft in its court filing.
Follow Us on Facebook – @LadunLiadi; Instagram – @LadunLiadi; Twitter – @LadunLiadi; Youtube – @LadunLiadiTV for updates
