Abuja, Nigeria | September 17, 2025
Tech giant Microsoft has announced the successful disruption of a major Nigerian-led phishing network known as RaccoonO365, responsible for large-scale cyberattacks targeting Microsoft 365 users worldwide. The operation, carried out in collaboration with global partners, led to the seizure of 338 malicious domains used by the syndicate.
According to Microsoft, the phishing network had been operating for several years, deploying deceptive websites that mimicked Microsoft 365 login pages to steal usernames, passwords, and other sensitive user data. Investigators revealed that the network’s command operations were traced to a Nigerian cybercrime group with international collaborators.
In a statement released on Tuesday, Microsoft’s Digital Crimes Unit said the action followed a court order that allowed it to take down the infrastructure used by the syndicate. “This disruption is part of our ongoing commitment to protect our users from cyber-enabled fraud. By seizing these domains, we have significantly reduced the reach and impact of the RaccoonO365 network,” the company said.
Cybersecurity experts noted that the syndicate’s operations had compromised thousands of individuals and corporate accounts across banking, education, and government institutions, resulting in millions of dollars in financial losses.
Nigeria’s Economic and Financial Crimes Commission (EFCC) has also been briefed on the case, with officials confirming ongoing investigations into the local actors allegedly behind the scheme.
The RaccoonO365 shutdown marks one of the largest coordinated crackdowns on Nigerian-led phishing operations in recent years. Analysts warn, however, that cybercriminals may attempt to rebuild their networks, urging businesses and individuals to strengthen their cybersecurity practices, including multi-factor authentication and email filtering systems.
Microsoft reassured users of its continued collaboration with law enforcement agencies worldwide to track, block, and dismantle malicious online activities.