The once popular Outlook add-in AgreeTo was turned into a powerful phishing kit after the developer abandoned the project.

First malicious Outlook add-in abused an abandoned domain to host a fake Microsoft login page, stealing 4,000+ credentials in ...

在Koi Security详细披露的这起不寻常的供应链攻击中，未知攻击者声称获得了一个已被废弃的合法插件相关域名，用来托管虚假的微软登录页面，在此过程中窃取了超过4000个凭证。该网络安全公司将此活动代号命名为AgreeToSteal。

Security researchers uncover the first malicious Outlook add-in, hijacked to steal 4,000+ Microsoft credentials in new supply chain attack.

Key cyber updates on ransomware, cloud intrusions, phishing, botnets, supply-chain risks, and nation-state threat activity.

It could cause you a lot of problems.