Microsoft and Cloudflare successfully disrupted RaccoonO365, a phishing-as-a-service operation that stole Microsoft 365 credentials, even bypassing multi-factor authentication. The service impacted over 5,000 accounts in 94 countries and recently integrated AI to enhance its attacks. While the primary operator remains at large, authorities seized 338 domains used in the operation.