A forgotten subdomain, thousands of accounts: autopsy of AgreeTo, the hijacked Outlook add‑in
At first, AgreeTo was nothing more than a small, convenient meeting‑scheduling tool, published on the Microsoft Add‑in Store and maintained as an open-source project. After a final update in late 2022, the project was abandoned in 2023; yet the add‑in remained listed and functional within the Microsoft 365 ecosystem, because its mechanism relies on an […]
