{"id":214173,"date":"2026-02-16T07:55:00","date_gmt":"2026-02-16T12:55:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/02\/16\/outlook-add-ins-hijack-0-day-patches-wormable-botnet-ai-malware\/"},"modified":"2026-02-16T14:10:08","modified_gmt":"2026-02-16T19:10:08","slug":"outlook-add-ins-hijack-0-day-patches-wormable-botnet-ai-malware","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/02\/16\/outlook-add-ins-hijack-0-day-patches-wormable-botnet-ai-malware\/","title":{"rendered":"Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware"},"content":{"rendered":"

Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI Malware<\/a><\/p>\n

https:\/\/thehackernews.com\/2026\/02\/weekly-recap-outlook-add-ins-hijack-0.html<\/a><\/p>\n

Publish Date: 2026-02-16 07:55:00<\/a><\/p>\n

Source Domain: thehackernews.com<\/a><\/p>\n

\ue804Ravie Lakshmanan<\/span>\ue802Feb 16, 2026<\/span><\/span><\/p>\n

This week\u2019s recap shows how small gaps are turning into big entry points. Not always through new exploits, often through tools, add-ons, cloud setups, or workflows that people already trust and rarely question.<\/p>\n

Another signal: attackers are mixing old and new methods. Legacy botnet tactics, modern cloud abuse, AI assistance, and supply-chain exposure are being used side by side, whichever path gives the easiest foothold.<\/p>\n

Below is the full weekly recap \u2014 a condensed scan of the incidents, flaws, and campaigns shaping the threat landscape right now.<\/p>\n

\u26a1 Threat of the Week<\/strong><\/h2>\n

Malicious Outlook Add-in Turns Into Phishing Kit <\/strong>\u2014 In an unusual case of a supply chain attack, the legitimate AgreeTo add-in for Outlook has been hijacked and turned into a phishing kit that stole more than 4,000 Microsoft account credentials. This was made possible by seizing control of a domain associated with the now-abandoned project to serve a fake Microsoft login page. The incident demonstrates how overlooked and abandoned assets turn into attack vectors. “What makes Office add-ins particularly concerning is the combination of factors: they run inside Outlook, where users handle their most sensitive communications, they can request permissions to read and modify emails, and they’re distributed through Microsoft’s own store, which carries implicit trust,” Koi Security’s Idan Dardikman said. Microsoft has since removed the add-in from its store.\u00a0<\/p>\n

\ud83d\udd14 Top News<\/strong><\/h2>\n