Back Gbhackers

Microsoft Outlook Add

Gbhackers •Divya • February 12, 2026

A dormant Microsoft Outlook add-in has been weaponized by attackers to steal thousands of login credentials and credit card numbers. The incident, identified by security researchers as the first known malicious Office add-in found in the wild, exposed a critical flaw in how Microsoft distributes third-party tools. The “Zombie” App In 2022, a developer published […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Weaponized Microsoft Outlook Add-ins Exploit User Credentials A dormant Microsoft Outlook add-in has been weaponized, leading to the theft of thousands of login credentials and credit card numbers. This incident marks the first known malicious Office add-in discovered in the wild, revealing a critical flaw in Microsoft's distribution of third-party tools. Additionally, a new attack technique called 'Exfil Out&Look' has been identified, allowing threat actors to exfiltrate sensitive email data without leaving forensic traces. 9 sources 40

Extracted Entities

Microsoft Outlook Add

The full story

Extracted Entities

Attack Types (2)

Malware (1)

Platforms (2)