
- Abandoned Outlook add-in AgreeTo hijacked into phishing kit stealing Microsoft accounts
- Attackers stole 4,000 accounts, credit card data, and banking security answers
- Microsoft removed add-in; users urged to reset passwords and monitor financial activity