The Nation Newspaper

Tag: cyberattacks

  • High profile suspects in police custody over Microsoft 365 cyberattacks

    High profile suspects in police custody over Microsoft 365 cyberattacks

    The Nigeria Police Force National Cybercrime Centre (NPF–NCCC) has apprehended high-profile internet fraud suspects involved in targeted cyberattacks against the email systems of major corporate organisations through the deployment of phishing links and malicious software.

    Police said the breakthrough followed credible and actionable intelligence received from Microsoft Corporation, United States through the Federal Bureau of Investigation (FBI), which indicated the use of a sophisticated phishing toolkit known as RaccoonO365.

    The toolkit was designed to create fraudulent Microsoft login portals aimed at harvesting user credentials and unlawfully accessing the email platforms of corporate, financial, and educational institutions.

    According to the Force Public Relations Officer, Chief Superintendent of Police Benjamin Hundeyin, who briefed reporters yesterday in Abuja on the development, the NPF–NCCC initiated a coordinated, intelligence-driven operation in collaboration with Microsoft, the FBI, and the United States Secret Service.

    Hundeyin said investigations traced multiple incidents of unauthorised Microsoft 365 account access between January and September, this year to phishing emails crafted to closely mimic legitimate Microsoft authentication pages.

    Read Also: Imo police launch disciplinary trial for seven officers over alleged misconduct

    He said the activities resulted in business email compromise, data breaches, and financial losses across multiple jurisdictions.

    Acting on precise and actionable intelligence, NPF–NCCC operatives were deployed to Lagos and Edo states, leading to the arrest of three suspects.

    Search operations conducted at their residences, the Force PRO said, resulted in the recovery of laptops, mobile devices, and other digital equipment, which have been linked to the fraudulent scheme after forensic analysis.

    “Further investigations identified Okitipi Samuel, also known as “RaccoonO365” and “Moses Felix,” as the principal suspect and developer of the phishing infrastructure. Investigations indicated that he operated a Telegram channel through which phishing links were sold in exchange for cryptocurrency and hosted fraudulent login portals on Cloudflare using stolen or fraudulently obtained email credentials.

    “Notably, investigations indicated no evidence linking the two other arrested individuals to the creation or operation of the phishing scheme.

    “The Nigeria Police Force reaffirms its steadfast commitment to safeguarding Nigeria’s digital space through the deployment of advanced technology, strengthened international partnerships, and diligent investigative and prosecutorial processes aimed at effectively countering evolving cyber threats,” he added.

  • Expert urges Fed Govt to strengthen fight against cyberattacks

    Expert urges Fed Govt to strengthen fight against cyberattacks

    Cybersecurity expert Yomi Ogunjobi has urged the federal government to step up efforts in addressing the increasing wave of cyberattacks across Nigeria.

    Speaking with ‘The Nation’ in Akure, Ondo State, Ogunjobi noted that Nigeria’s technological infrastructure for tackling cybercrime remains weak compared to global standards.

    He warned that this gap has left financial institutions, government agencies, and examination bodies vulnerable to persistent data theft.

    “Cybersecurity is about protecting everybody’s information from unauthorised access, which is usually perpetrated by individuals with criminal intent,” he said.

    Ogunjobi also pointed to the misuse of Artificial Intelligence (AI) as a growing challenge, explaining that cybercriminals now deploy AI tools to clone voices and images to deceive victims.

    Read Also: Iran targeting US election with fake news sites, cyberattacks – Microsoft

    He recalled his own experience where fraudsters attempted to manipulate recruitment interviews using cloned identities from abroad.

    The expert called for stronger investment in advanced technology and proactive measures to safeguard Nigerians against cyber threats.

    “During interviews, someone else would sit in and act as if they were the actual applicant, using cloned images and voices. We had to change our onboarding process. Now, anyone applying must appear physically at one of our branches to complete interviews via Zoom or Teams,” he explained.

    While acknowledging that the federal government had introduced several laws and policies to improve cybersecurity, the expert stressed the need for effective enforcement, adequate funding, and skilled manpower to make them work.

    He also canvassed greater public enlightenment on data protection, especially bank details, and urged public institutions, including examination bodies, to upgrade their facilities to withstand modern cyber threats.