‘Dead’ Outlook add-in hijacked to phish 4,000 Microsoft Office Store users

An attacker hijacked an abandoned Outlook add-in called AgreeTo by claiming its orphaned subdomain URL, bypassing Microsoft's weak vetting process that only reviews manifests without checking actual code. The attack compromised 4,000 users' Microsoft credentials through a phishing page served from the hijacked URL. Microsoft's Show more