Police arrest main suspect in Microsoft 365 global phishing scheme
A Nigerian man, Okitipi Samuel, has been arrested for allegedly masterminding a major cyberattack targeting Microsoft 365 users worldwide. The arrest was announced by Force PRO Benjamin Hundeyin on June 5, 2025, following investigations by the National Cybercrime Centre. The probe involved collaboration with international agencies, including Microsoft and the FBI. Authorities say the suspect developed phishing tools that compromised email accounts of businesses and institutions across several countries.
What happened
- Okitipi Samuel was identified as the developer and operator of a phishing toolkit called "Raccoon 0365," used to create fake Microsoft login portals.
- The investigation, which began after a tip from Microsoft USA and the FBI, traced the cyberattacks to Nigeria between January and September 2025.
- Two other individuals, Joshua and James, were also arrested but later found to be victims of identity theft, not active participants.
- Digital forensics and cryptocurrency tracing linked Samuel to fraudulent schemes, including the sale of phishing links for cryptocurrency.
- The suspect faces charges under Nigeria’s Cybercrimes Act, 2024, and may be prosecuted locally unless extradition is formally requested.
