Microsoft’s Digital Crimes Unit (DCU) collaborated with Cloudflare to seize 338 domains linked to RaccoonO365, a threat group offering a phishing-as-a-service toolkit. This operation targeted the group responsible for stealing over 5,000 Microsoft 365 credentials across 94 countries since July 2024, using a court order from the Southern District of New York.