Security News First Malicious Outlook Add-In Found Stealing 4,000+ Microsoft Credentials TheHackerNews Daniel Bender 11 Feb 2026 First malicious Outlook add-in abused an abandoned domain to host a fake Microsoft login page, stealing 4,000+ credentials in a supply chain attack.