The Nigeria Police Force National Cybercrime Centre (NPF–NCCC) has arrested suspected high-profile cybercriminals involved in targeted attacks on the email systems of major corporate organisations using phishing links and malicious software.
The breakthrough followed credible intelligence from Microsoft Corporation, United States, transmitted through the Federal Bureau of Investigation (FBI). The intelligence uncovered the use of a sophisticated phishing toolkit known as RaccoonO365, designed to create fake Microsoft login pages for harvesting user credentials and gaining unauthorised access to email platforms belonging to corporate, financial, and educational institutions.
Based on this intelligence, the NPF–NCCC launched a coordinated, intelligence-led operation in collaboration with Microsoft, the FBI, and the United States Secret Service. Investigations traced several incidents of unauthorised Microsoft 365 account access recorded between January and September 2025 to phishing emails crafted to closely resemble legitimate Microsoft authentication portals. The attacks resulted in business email compromise, data breaches, and financial losses across multiple jurisdictions.
Acting on precise intelligence, NPF–NCCC operatives were deployed to Lagos and Edo States, where three suspects were arrested. Searches conducted at their residences led to the recovery of laptops, mobile phones, and other digital devices. Forensic analysis has linked the recovered items to the cyber fraud operation.
Further investigations identified Okitipi Samuel, also known as “RaccoonO365” and “Moses Felix,” as the principal suspect and alleged developer of the phishing infrastructure. Findings revealed that he operated a Telegram channel through which phishing links were sold for cryptocurrency and hosted fake Microsoft login portals on Cloudflare using stolen or fraudulently obtained email credentials. Investigators, however, found no evidence connecting the two other arrested individuals to the creation or management of the phishing scheme.
The Nigeria Police Force reaffirmed its commitment to protecting the nation’s digital ecosystem through the deployment of advanced technology, strengthened international collaboration, and thorough investigative and prosecutorial efforts to combat emerging cyber threats.
