Microsoft has seized 338 websites associated with RaccoonO365 and identified the leader of the phishing service - Joshua Ogundipe - as part of a larger effort to disrupt what Redmond's Digital Crimes Unit calls the "fastest-growing tool used by cybercriminals to steal Microsoft 365 usernames and passwords."

The criminal operation sold subscriptions to its RaccoonO365 Suite of phishing kits , ranging from a 30-day plan for $335 to a 90-day subscription for $999, via a private Telegram channel with more than 850 members, according to separate blogs from Steven Masada , Microsoft's DCU assistant general counsel, and Cloudflare , which also participated in the website takedown.

Since July 2024, these phishing kits have been used by other criminals to steal at least 5,000 Microsoft credential

See Full Page