Security researchers uncover the first malicious Outlook add-in, hijacked to steal 4,000+ Microsoft credentials in new supply chain attack.
The once popular Outlook add-in AgreeTo was turned into a powerful phishing kit after the developer abandoned the project.