This event is archived. Final snapshot from when the story concluded. View on Dashboard
International cybercrime arrest

Nigeria Police Arrest RaccoonO365 Cybercrime Suspect

Analysis based on 10 articles · First reported Dec 18, 2025 · Last updated Dec 18, 2025

Sentiment
20
Attention
4
Articles
10
Market Impact
General
Live prominence charts, article sentiment distribution, and event development timeline available on the Ergen Dashboard

The arrests by the Nigeria — Nigeria Police Force National Cybercrime Centre (NPF–NCCC) in collaboration with international partners like the United States — Federal Bureau of Investigation (FBI) and the United States — United States Postal Service, and intelligence from Microsoft, are positive for cybersecurity and the financial markets. This event reduces the risk of business email compromise and data breaches, potentially improving investor confidence in the digital security of corporate and financial institutions.

Cybersecurity Financial Services Technology

The Nigeria — Nigeria Police Force National Cybercrime Centre (NPF–NCCC), in collaboration with Microsoft, the United States — Federal Bureau of Investigation (FBI), and the United States — United States Postal Service, has apprehended three high-profile internet fraud suspects in Nigeria. The principal suspect, Okitipi Samuel, also known as 'RaccoonO365' and 'Moses Felix', was identified as the developer of a sophisticated phishing toolkit called RaccoonO365. This toolkit was used to create fraudulent Microsoft login portals to harvest user credentials and gain unauthorized access to Microsoft 365 accounts of corporate, financial, and educational institutions between January and September 2025. Okitipi Samuel operated a Telegram channel to sell phishing links for Tether (cryptocurrency) and hosted fraudulent portals on Cloudflare. The cyberattacks resulted in business email compromise, data breaches, and financial losses across multiple jurisdictions. Laptops, mobile devices, and other digital equipment linked to the scheme were recovered during search operations in Lagos and Edo States. The Nigeria — Nigeria Police Force reaffirmed its commitment to safeguarding Nigeria's digital space and strengthening international cooperation against cybercrime.

per
Okitipi Samuel, also known as 'RaccoonO365' and 'Moses Felix', was identified as the principal suspect and developer of the phishing infrastructure, selling phishing links for cryptocurrency.
Importance 100.0 Sentiment -100.0
crypto
Tether (cryptocurrency) was used by Okitipi Samuel as a medium for selling phishing links and receiving illicit proceeds, highlighting its role in cybercrime transactions.
Importance 30.0 Sentiment 0.0
priv
Okitipi Samuel operated a Telegram channel to market and sell phishing links, indicating the platform's use in facilitating cybercrime.
Importance 20.0 Sentiment 0.0
priv
Exodus Movement was identified through blockchain analysis as a platform for cryptocurrency wallets used in the scheme by Okitipi Samuel.
Importance 10.0 Sentiment 0.0
priv
Bitnob was identified through blockchain analysis as a platform for cryptocurrency wallets used in the scheme by Okitipi Samuel.
Importance 10.0 Sentiment 0.0
stock
Importance 0.0 Sentiment 0.0
govactor
Importance 0.0 Sentiment 0.0
govactor
Importance 0.0 Sentiment 0.0
cnt
Importance 0.0 Sentiment 0.0
stock
Importance 0.0 Sentiment 0.0
govactor
ERGEN INTELLIGENCE
Track this event live

Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.

Open Dashboard

About Ergen

Ergen is a news intelligence platform that converts raw news articles into structured data. It tracks events, entities, and the relationships between them, with sentiment and attention metrics derived from thousands of articles. Pages on this site are daily static snapshots from the platform's live database. For real-time tracking, search, and alerts, the full dashboard is at app.ergen.ai.