The Nigeria Police Force National Cybercrime Centre (NPF–NCCC), in collaboration with the US Federal Bureau of Investigation (FBI) and the US Secret Service, has apprehended three individuals linked to a high-profile internet fraud operation in Lagos and Edo States.
The suspects are alleged to have carried out targeted cyber-attacks on email systems of major corporate organisations in Nigeria, using phishing links and malicious software to steal sensitive information.
According to Force Public Relations Officer, CSP Benjamin Hundeyin, the arrests followed actionable intelligence from Microsoft and the FBI, which revealed a sophisticated phishing toolkit called RaccoonO365. The toolkit was reportedly used to create fake Microsoft login portals to harvest user credentials and gain unauthorized access to corporate, financial, and educational email accounts.
“Acting on this intelligence, the NPF–NCCC coordinated an operation with Microsoft, the FBI, and the US Secret Service,” Hundeyin said.
Investigations showed that between January and September 2025, phishing emails closely mimicking Microsoft authentication pages were used to compromise accounts, resulting in business email fraud, data breaches, and financial losses across multiple sectors.
NPF–NCCC operatives carried out raids in Lagos and Edo States, leading to the arrest of the three suspects. Searches of their residences recovered laptops, mobile devices, and other digital tools, which were confirmed through forensic analysis to be linked to the cybercrime operation.
Further investigations identified Okitipi Samuel, also known as “RaccoonO365” and “Moses Felix,” as the mastermind and developer of the phishing scheme. He allegedly ran a Telegram channel to sell phishing links for cryptocurrency and hosted fraudulent login portals on Cloudflare using stolen or fraudulently obtained credentials.
Authorities noted that the other two suspects were not involved in the creation or operation of the phishing infrastructure.
The Nigeria Police Force reaffirmed its commitment to protecting Nigeria’s digital space, leveraging advanced technology, international partnerships, and rigorous investigative and prosecutorial measures to combat evolving cyber threats.