RaccoonO365 Phishing Network Dismantled — CyberDudeBivash Authority Report
Executive Summary Microsoft’s Digital Crimes Unit (DCU), working with Cloudflare, seized 338 domains tied to RaccoonO365 , a Phishing-as-a-Service platform. CyberScoop +3 The Official Microsoft Blog +3 IT Pro +3 Since July 2024, RaccoonO365 has stolen ≥5,000 Microsoft 365 credentials across 94 countries . IT Pro +3 The Official Microsoft Blog +3 CyberScoop +3 The service is subscription-based, offering phishing kits priced from US$355 for 30 days to US$999 for 90 days, advertised via Telegram channels with ~850+ members. The Official Microsoft Blog +2 IT Pro +2 Key disruption steps: domain seizures, interstitial phish-warning pages, disabling of Cloudflare Workers scripts and suspension of associated accounts. computing.co.uk +3 The Hacker News +3 The Official Microsoft Blog +3 Threat Profile & Attack Mechanics What RaccoonO365 Did It offered phishing kits that impersonated trusted brands (Microsoft, Adobe, SharePoint, etc.), making very convincing fa...