Security News Microsoft Store Outlook add-in hijacked to steal 4,000 Microsoft accounts BleepingComputer Daniel Bender 11 Feb 2026 The AgreeTo add-in for Outlook has been hijacked and turned into a phishing kit that stole more than 4,000 Microsoft account credentials.