Microsoft seizes 338 websites to disrupt rapidly growing ‘RaccoonO365’ phishing service

Microsoft has seized 338 phishing websites linked to the RaccoonO365 operation, in a move described by DataBreaches[.]Net as disrupting a rapidly growing service that allowed novices to mimic official Microsoft communications to steal Microsoft 365 credentials. The action was executed under a court order from the U.S.

District Court for the Southern District of New York, with Microsoft saying the seizures followed a lawsuit filed in partnership with Health-ISAC because the tool had been deployed against hospitals, including at least 20 U.S. healthcare organisations. The operators offered subscription-based phishing kits that helped attackers harvest usernames and passwords by imitating legitimate Microsoft messages.

Authorities identified the cybercriminal group’s leader as an individual based in Nigeria, according to the report. For more details, Becker’s Health IT is cited in the original coverage. DataBreaches[.]Net notes the release underscores ongoing efforts to curb phishing-as-a-service platforms that target critical healthcare sectors.