Microsoft patched a vulnerability in Microsoft Outlook in 2017. It hasn’t slowed hackers down. 

Original source: https://www.wired.com/story/microsoft-outlook-home-page-hack