Fake Email Scam Shut Down by Microsoft and Cloudflare
Microsoft and internet security company Cloudflare have shut down a major cybercrime operation known as RaccoonO365, which tricked thousands of people around the world into giving away their Microsoft 365 login information.
The group behind RaccoonO365 ran a subscription-based service that allowed other criminals to launch fake email attacks. These emails looked like they came from trusted companies such as Microsoft, Adobe, and DocuSign, but were designed to steal usernames and passwords.
Since July 2024, more than 5,000 accounts were compromised in 94 countries, with over 2,300 businesses in the U.S. targeted — including hospitals and healthcare organizations.
With a court order, Microsoft and Cloudflare took down 338 fake websites connected to the scam. Cloudflare also blocked the hackers from using their services and warned others not to misuse their tools.
The person believed to be behind RaccoonO365 is Joshua Ogundipe, based in Nigeria. He is still at large, but Microsoft has reported him to international authorities.
How to Protect Yourself from Email Scams
Cybercriminals are getting better at fooling people — but you can protect yourself with a few simple habits:
- Be suspicious of unexpected emails – especially those that ask you to click a link, sign in, or download something.
- Check the sender’s email address – even if the message looks official, a strange or misspelled email address is a red flag.
- Avoid rushing – scammers try to create a sense of urgency. Take your time before clicking or responding.
- Use strong passwords – and avoid using the same one on multiple accounts.
- Turn on two-step verification – this adds a second layer of protection to your accounts.
- Report anything suspicious – if you think you’ve received a scam email, let your IT department or service provider know right away.
Staying alert and cautious online is one of the best ways to avoid falling victim to scams like RaccoonO365.
Source: https://thehackernews.com/2025/09/raccoono365-phishing-network-shut-down.html