A Microsoft Outlook add-in was abandoned and taken over by hackers, who used it to collect email accounts and banking data.
Over 4,000 Microsoft accounts compromised by a malicious Outlook add-in that hijacked an abandoned scheduling tool to steal credentials via a phishing kit..